diff --git a/services/forgejo-runner/default.nix b/services/forgejo-runner/default.nix
index f7b39fe..6b5e511 100644
--- a/services/forgejo-runner/default.nix
+++ b/services/forgejo-runner/default.nix
@@ -13,7 +13,7 @@ in
     age.secrets.forgejo-runner-token = {
       file  = ./secrets/forgejo-runner-token.age;
       mode  = "0660";
-      owner = "root";
+      owner = "gitea-runner";
     };
     services.gitea-actions-runner = {
       package = pkgs.forgejo-actions-runner;