diff --git a/nixos/queen/configuration.nix b/nixos/queen/configuration.nix
index 50c54f6..2275d63 100644
--- a/nixos/queen/configuration.nix
+++ b/nixos/queen/configuration.nix
@@ -44,6 +44,9 @@
     };
   };
 
+  sops.secrets.queen-Lillian."nextcloudadmin".mode = "0400";
+  sops.secrets.queen-Lillian."nextclouddb".mode = "0400";
+
   nix = {
     gc = {
       automatic = true;
diff --git a/nixos/queen/nextcloud.nix b/nixos/queen/nextcloud.nix
index 075ed6a..d1fcf28 100644
--- a/nixos/queen/nextcloud.nix
+++ b/nixos/queen/nextcloud.nix
@@ -53,10 +53,10 @@
       dbuser = "nextcloud";
       dbhost = "/run/postgresql"; # nextcloud will add /.s.PGSQL.5432 by itself
       dbname = "nextcloud";
-      dbpassFile = config.sops.secrets."nextclouddb".path;
+      dbpassFile = config.sops.secrets.queen-Lillian."nextclouddb".path;
 
       #TODO: work with sops to set this instead of a file & make sure the db setup is the same as on the previous server for easy migration
-      adminpassFile = config.sops.secrets.queen."nextcloudadmin".path;
+      adminpassFile = config.sops.secrets.queen-Lillian."nextcloudadmin".path;
       adminuser = "admin";
     };
   };