diff --git a/config/services/nextcloud.nix b/config/services/nextcloud.nix
index 41b3c9f..459d3d7 100644
--- a/config/services/nextcloud.nix
+++ b/config/services/nextcloud.nix
@@ -13,6 +13,7 @@ in
   age.secrets.mailnix-passwd = {
     generator.script = "alnum";
     group = "nextcloud";
+    mode = "440";
   };
 
   age.secrets.mailnix-passwd-hash = {
diff --git a/config/services/vaultwarden.nix b/config/services/vaultwarden.nix
index ad54fcd..2ef9645 100644
--- a/config/services/vaultwarden.nix
+++ b/config/services/vaultwarden.nix
@@ -56,7 +56,6 @@ in
   };
   age.secrets.mailnix-passwd = {
     generator.script = "alnum";
-    group = "vaultwarden";
   };
 
   age.secrets.mailnix-passwd-hash = {
diff --git a/flake.lock b/flake.lock
index 4455fea..cac61a9 100644
--- a/flake.lock
+++ b/flake.lock
@@ -1641,13 +1641,13 @@
         "treefmt-nix": "treefmt-nix_3"
       },
       "locked": {
-        "lastModified": 1733348187,
-        "narHash": "sha256-B0PMTlkWm5o+Fi1Z4XO35zbU2k9NUMDq3g02EbPbXm4=",
+        "lastModified": 1733348844,
+        "narHash": "sha256-glufwHZDCoXjPrfvYSw8PrwQLyFVsg933gt/Gg4hlLE=",
         "ref": "refs/heads/main",
-        "rev": "803f8ba1f252220a4016b04a90862369d8e242f2",
-        "revCount": 21,
+        "rev": "3052ba7b255b8e3c333fcb318e79ce15c88dd2a7",
+        "revCount": 22,
         "type": "git",
-        "url": "file:///home/patrick/repos/nixp-meta"
+        "url": "https://forge.lel.lol/patrick/nixp-meta.git"
       },
       "original": {
         "type": "git",