diff --git a/services/owntracks.nix b/services/owntracks.nix
index be4e8cc..c8135a4 100644
--- a/services/owntracks.nix
+++ b/services/owntracks.nix
@@ -8,7 +8,10 @@ let
 in {
   age.secrets.owntracks-recorder-env.file =
     ../secrets/owntracks/recorder.env.age;
-  age.secrets.owntracks-htpasswd.file = ../secrets/owntracks/htpasswd.age;
+  age.secrets.owntracks-htpasswd = {
+    file = ../secrets/owntracks/htpasswd.age;
+    owner = config.services.nginx.user;
+  };
 
   virtualisation.oci-containers.containers = {
     owntracks-recorder = {