diff --git a/hosts/nixos/lapetus/services/grafana.nix b/hosts/nixos/lapetus/services/grafana.nix
index 8b0fb5b..a08358e 100644
--- a/hosts/nixos/lapetus/services/grafana.nix
+++ b/hosts/nixos/lapetus/services/grafana.nix
@@ -4,6 +4,7 @@ let
   sopsSettings = {
     sopsFile = ../secrets.yaml;
     group = "grafana";
+    owner = "grafana";
   };
 in
 {
diff --git a/hosts/nixos/lapetus/services/pounce.nix b/hosts/nixos/lapetus/services/pounce.nix
index 6be9a44..c8a8dbd 100644
--- a/hosts/nixos/lapetus/services/pounce.nix
+++ b/hosts/nixos/lapetus/services/pounce.nix
@@ -17,6 +17,7 @@ in
 {
   # Generate cert
   security.acme.certs."wildcard-irc.moonythm.dev" = {
+    owner = user;
     group = user;
     domain = "*.irc.moonythm.dev";
   };