From 59181d64b90273498b500d6aeeeeed956bee46a6 Mon Sep 17 00:00:00 2001
From: pazpi <davide@pasetto.me>
Date: Thu, 26 Mar 2026 22:59:39 +0100
Subject: [PATCH] Set permission to actual secrets

---
 hosts/actual/default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/hosts/actual/default.nix b/hosts/actual/default.nix
index 3b0a2e5..f0ebb8e 100644
--- a/hosts/actual/default.nix
+++ b/hosts/actual/default.nix
@@ -11,6 +11,9 @@ in
   age.secrets = {
     actual-openid-client-secret = {
       file = ../../secrets/actual-openid-client-secret.age;
+      owner = "actual";
+      group = "actual";
+      mode = "0400";
     };
   };