diff --git a/nixosModules/stalwart.nix b/nixosModules/stalwart.nix
index 677db45..5079596 100644
--- a/nixosModules/stalwart.nix
+++ b/nixosModules/stalwart.nix
@@ -20,7 +20,7 @@
     sops.secrets.stalwart-admin-password = { owner = "stalwart-mail"; group = "stalwart-mail"; };
     sops.secrets.stalwart-kyren-password = { owner = "stalwart-mail"; group = "stalwart-mail"; };
     sops.secrets.stalwart-eko-password = { owner = "stalwart-mail"; group = "stalwart-mail"; };
-    sops.secrets.stalwart-git-password = { owner = "stalwart-mail"; group = "gitea"; };
+    sops.secrets.stalwart-git-password = { owner = "stalwart-mail"; group = "gitea"; mode = "0440"; };
     sops.secrets.stalwart-postmaster-password = { owner = "stalwart-mail"; group = "stalwart-mail"; };
 
     services.nginx.virtualHosts."webadmin.kyren.codes" = {