diff --git a/nixos/machines/biskcomp.nix b/nixos/machines/biskcomp.nix
index c036b233..1e44cfbf 100644
--- a/nixos/machines/biskcomp.nix
+++ b/nixos/machines/biskcomp.nix
@@ -67,6 +67,9 @@ in
 
   age.secrets.discourse-admin-password = {
     file = ./secrets/discourse-admin-password.age;
+    mode = "770";
+    owner = "discourse";
+    group = "users";
   };
 
   services.discourse = {