diff --git a/flake.lock b/flake.lock
index f0bd2b3..c8ada76 100644
--- a/flake.lock
+++ b/flake.lock
@@ -68,11 +68,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1780203844,
-        "narHash": "sha256-K5sT4jTpGs15ADhviMKNBH38REpPf5Q6mM1+N6cArVE=",
+        "lastModified": 1784432872,
+        "narHash": "sha256-n3gKTBIV4ZA5VQpUakffBe3KGu4+mhPoA34rrqS0GkA=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "b51242d7d43689db2f3be91bd05d5b24fbb469c4",
+        "rev": "fd1462031fdee08f65fd0b4c6b64e22239a77870",
         "type": "github"
       },
       "original": {
diff --git a/flake.nix b/flake.nix
index 489b306..d85717c 100644
--- a/flake.nix
+++ b/flake.nix
@@ -112,9 +112,9 @@
               };
               caldav-export-config = {
                 file = ./secrets/caldav-export-config.age;
-                owner = "nobody";
-                group = "nobody";
-                mode = "0400";
+                owner = "root";
+                group = "root";
+                mode = "0440";
               };
             };
           }
diff --git a/secrets/caldav-export-config.age b/secrets/caldav-export-config.age
index 0efced1..9716329 100644
Binary files a/secrets/caldav-export-config.age and b/secrets/caldav-export-config.age differ