diff --git a/modules/monitoring/prometheus.nix b/modules/monitoring/prometheus.nix
index 29c190b..a514e05 100644
--- a/modules/monitoring/prometheus.nix
+++ b/modules/monitoring/prometheus.nix
@@ -49,7 +49,12 @@ in
   config = lib.mkMerge [
     (lib.mkIf cfg.enable {
 
-      age.secrets.searx-prometheus-secret.file = ../../secrets/searx-prometheus-secret.age;
+      age.secrets.searx-prometheus-secret = {
+        file = ../../secrets/searx-prometheus-secret.age;
+        owner = config.users.users."prometheus".name;
+        group = config.users.groups."prometheus".name;
+        mode = "0644";
+      };
 
       services.prometheus = {
         enable = true;
@@ -74,7 +79,7 @@ in
           }
           {
             job_name = "searxng";
-            static_configs = [ { targets = [ "searxng.internal:8080" ]; } ];
+            static_configs = [ { targets = [ "caddy.internal:8080" ]; } ];
             basic_auth = {
               username = "searxng";
               password_file = config.age.secrets.searx-prometheus-secret.path;