diff --git a/hosts/tatos/services/prometheus.nix b/hosts/tatos/services/prometheus.nix
index 73b656f..7bcceaa 100644
--- a/hosts/tatos/services/prometheus.nix
+++ b/hosts/tatos/services/prometheus.nix
@@ -10,7 +10,11 @@ let
   };
 in
 {
-  age.secrets.prometheus-basicauth-password.file = ./prometheus-basicauth-password.age;
+  age.secrets.prometheus-basicauth-password = {
+    file = ./prometheus-basicauth-password.age;
+    owner = "prometheus";
+    group = "prometheus";
+  };
 
   services.prometheus.exporters.node = {
     enable = true;