system/monitoring/logs.nix

@@ -21,6 +21,8 @@ in
   vault.secrets.promtail-loki-auth = lib.mkIf config.vault.enable {
     secretPath = "shared/loki/push-auth";
     extractKey = "password";
+    owner = "promtail";
+    group = "promtail";
     services = [ "promtail" ];
   };