diff --git a/nixos/queen/configuration.nix b/nixos/queen/configuration.nix
index 509910b..14f3750 100644
--- a/nixos/queen/configuration.nix
+++ b/nixos/queen/configuration.nix
@@ -56,6 +56,8 @@
   #Set up sops config, and configure where the keyfile is, then set the mode for the unencrypted keys
   sops.defaultSopsFile = ../../secrets/queen-Lillian.yaml;
   sops.age.keyFile = ./keys.txt;
+  sops.secrets."mssqlpass".mode = "0440";
+  sops.secrets."mssqlpass".owner = config.users.users.mssql.name;
 
   nix = {
     gc = {