diff --git a/nixos/gandalf/configuration.nix b/nixos/gandalf/configuration.nix
index 524e156..7e29d64 100644
--- a/nixos/gandalf/configuration.nix
+++ b/nixos/gandalf/configuration.nix
@@ -19,7 +19,7 @@ in
     # Mounts unencrypted sops values at /run/secrets/rndc_keys accessible by root only by default.
     secrets = {
       "lego/dnsimple/token" = {
-        owner = config.users.users.kah;
+        owner = config.users.users.kah.name;
         inherit (config.users.users.kah) group;
       };
     };