diff --git a/systems/x86_64-linux/stargate/services/ente.nix b/systems/x86_64-linux/stargate/services/ente.nix
index c7fa649..1a25389 100644
--- a/systems/x86_64-linux/stargate/services/ente.nix
+++ b/systems/x86_64-linux/stargate/services/ente.nix
@@ -8,7 +8,7 @@ let
 domain = "ente.kylekrein.com";
 in
 {
-    sops.secrets."services/minio" = {};
+    sops.secrets."services/minio" = {owner = "minio";};
     services.minio = {
         enable = true;
     	# ente's config must match this region!