diff --git a/services/nixarr/default.nix b/services/nixarr/default.nix
index 2377680..4d66383 100644
--- a/services/nixarr/default.nix
+++ b/services/nixarr/default.nix
@@ -17,21 +17,29 @@ in {
       };
       nixarr-radarr-apiKeyFile = {
         file = ../../secrets/nixarr-radarr-apiKeyFile.age;
-        owner = "exportarr-radarr-exporter";
+        owner = "exportarr";
+        group = "users";
       };
       nixarr-prowlarr-apiKeyFile = {
         file = ../../secrets/nixarr-prowlarr-apiKeyFile.age;
-        owner = "exportarr-prowlarr-exporter";
+        owner = "exportarr";
+        group = "users";
       };
       nixarr-bazarr-apiKeyFile = {
         file = ../../secrets/nixarr-bazarr-apiKeyFile.age;
-        owner = "exportarr-bazarr-exporter";
+        owner = "exportarr";
+        group = "users";
       };
       nixarr-sonarr-apiKeyFile = {
         file = ../../secrets/nixarr-sonarr-apiKeyFile.age;
-        owner = "exportarr-sonarr-exporter";
+        owner = "exportarr";
+        group = "users";
       };
     };
+    users.users.exportarr = {
+      isNormalUser = true;
+      extraGroups = ["users"];
+    };
     fileSystems."/downloads" = {
       device = "192.168.1.125:/BIGDATA";
       fsType = "nfs";