diff --git a/hosts/abacus/miniflux.nix b/hosts/abacus/miniflux.nix
index 6389afd..82f5a62 100644
--- a/hosts/abacus/miniflux.nix
+++ b/hosts/abacus/miniflux.nix
@@ -5,6 +5,7 @@ in {
   age.secrets.miniflux = {
     file = ../../secrets/miniflux.age;
     owner = config.systemd.services.miniflux.serviceConfig.User;
+    group = "root";
   };
 
   services.miniflux = {