diff --git a/modules/secrets/secrets.nix b/modules/secrets/secrets.nix
index 8ee9892..d9196f4 100644
--- a/modules/secrets/secrets.nix
+++ b/modules/secrets/secrets.nix
@@ -28,7 +28,10 @@ in
 
   "miniflux/credentials.age".publicKeys = all;
 
-  "monitoring/password.age".publicKeys = all;
+  "monitoring/password.age" = {
+    owner = "grafana";
+    publicKeys = all;
+  };
 
   "nextcloud/password.age" = {
     # Must be readable by the service