diff --git a/secrets/default.nix b/secrets/default.nix
index 30c81c6..2105d2d 100644
--- a/secrets/default.nix
+++ b/secrets/default.nix
@@ -27,9 +27,10 @@ in
           "infinidoge-password"
           "root-password"
           "binary-cache-private-key"
-          "borg-password"
           "borg-ssh-key"
           ;
+
+        "borg-password" = secrets."borg-password" // { group = "borg"; mode = "440";};
       }
       (mkIf config.services.nginx.enable {
         "inx.moe.pem" = withOwnerGroup "nginx" secrets."inx.moe.pem";