diff --git a/configuration.nix b/configuration.nix
index 71941b2..1ee3c35 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -41,7 +41,7 @@
     defaultSopsFile = ./secrets.yaml;
     age.sshKeyPaths = [ "/root/id_ed25519" ];
     secrets.github-access-token = { };
-    # secrets.cloudflare-dns-api-token = { mode = "0440"; group = "acme"; };
+    secrets.cloudflare-dns-api-token = { mode = "0440"; user = "acme"; };
   };
   nix.extraOptions = "!include /run/secrets/github-access-token";