diff --git a/configurations/nixos/graylog-tofu/default.nix b/configurations/nixos/graylog-tofu/default.nix
index 825a790..a086028 100644
--- a/configurations/nixos/graylog-tofu/default.nix
+++ b/configurations/nixos/graylog-tofu/default.nix
@@ -25,9 +25,9 @@ in
     ];
 
   sops.secrets.graylog = {
-    mode = "0400";
-    owner = "graylog";
-    group = "graylog";
+    mode = "0444";
+    # owner = "graylog";
+    # group = "graylog";
   };
 
   systemd.services.graylog = {