diff --git a/modules/consul.nix b/modules/consul.nix
index 87e919f..4f042d0 100644
--- a/modules/consul.nix
+++ b/modules/consul.nix
@@ -23,6 +23,8 @@ in {
   sops.secrets.consul_encrypt_json = {
     sopsFile = "${secretstore}/consul_encrypt.json";
     format = "binary";
+    owner = "consul";
+    group = "consul";
   };
 
   services.consul = {