diff --git a/hosts/monolith/configuration.nix b/hosts/monolith/configuration.nix
index 53f9bb8..3f0537c 100644
--- a/hosts/monolith/configuration.nix
+++ b/hosts/monolith/configuration.nix
@@ -20,12 +20,10 @@
   sops.secrets.spotifyShortcutsClientId = {
     sopsFile = ../../secrets/spotify-shortcuts.yaml;
     key = "clientId";
-    mode = "0644";
   };
   sops.secrets.spotifyShortcutsClientSecret = {
     sopsFile = ../../secrets/spotify-shortcuts.yaml;
     key = "clientSecret";
-    mode = "0644";
   };
 
   # Users
diff --git a/modules/programs/spotify-shortcuts.nix b/modules/programs/spotify-shortcuts.nix
index 37cd980..111fc88 100644
--- a/modules/programs/spotify-shortcuts.nix
+++ b/modules/programs/spotify-shortcuts.nix
@@ -23,11 +23,14 @@ in {
     environment.variables = {
       SPOTIFY_SHORTCUTS_CONFIG = config.sops.templates."spotify-shortcuts-client.json".path;
     };
-    sops.templates."spotify-shortcuts-client.json".content = ''
-      {
-        "clientId": "${config.sops.placeholder.${cfg.clientIdSopsKey}}",
-        "clientSecret": "${config.sops.placeholder.${cfg.clientSecretSopsKey}}"
-      }
-    '';
+    sops.templates."spotify-shortcuts-client.json" = {
+      mode = "644";
+      content = ''
+        {
+          "clientId": "${config.sops.placeholder.${cfg.clientIdSopsKey}}",
+          "clientSecret": "${config.sops.placeholder.${cfg.clientSecretSopsKey}}"
+        }
+      '';
+    };
   };
 }