diff --git a/hosts/harbor/configuration.nix b/hosts/harbor/configuration.nix
index 4a8bd8b..5c1fc46 100644
--- a/hosts/harbor/configuration.nix
+++ b/hosts/harbor/configuration.nix
@@ -20,6 +20,7 @@
   };
   sops.secrets."gitea-db-pass" = {
     sopsFile = ../../secrets/harbor/gitea.yaml;
+    owner = config.services.gitea.user;
     key = "databasePassword";
   };