diff --git a/system/monitoring/metrics.nix b/system/monitoring/metrics.nix
index 81b324e..5bed309 100644
--- a/system/monitoring/metrics.nix
+++ b/system/monitoring/metrics.nix
@@ -23,6 +23,8 @@
   vault.secrets.nixos-exporter-nkey = {
     secretPath = "shared/nixos-exporter/nkey";
     extractKey = "nkey";
+    owner = "nixos-exporter";
+    group = "nixos-exporter";
   };
 
   services.prometheus.exporters.nixos = {