diff --git a/modules/server/link/default.nix b/modules/server/link/default.nix
index d240524..2ea976c 100644
--- a/modules/server/link/default.nix
+++ b/modules/server/link/default.nix
@@ -5,6 +5,7 @@ let
   port = "44300";
 in
 {
+  users.users.kanidm.extraGroups = [ "nginx" ];
   services.kanidm = {
     package = pkgs.kanidmWithSecretProvisioning_1_7;
 
diff --git a/secrets.nix b/secrets.nix
index 14a6b3b..b72bf1d 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -1,7 +1,7 @@
 let
   lyes = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMHJ2Wjz+SYDfgX8kMpZtVLCNxwWT2XbKOqFyDwkHOg9 mail@lyes.eu";
   users = [ lyes ];
-  zora = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDu+E8SJKMzvhezPLLvqpgJQUs/qa+GwieeW92dHlcVI root@zora";
+  zora = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIILgkHQ76wPhKXgeEWpCqzBKX3ARJDZPMtukWL1f91Ny root@zora";
   hosts = [ zora ];
   all = users ++ hosts;
 in
diff --git a/secrets/zora/services/kanidm-admin-password.age b/secrets/zora/services/kanidm-admin-password.age
index 513f9f7..7a6c0b9 100644
--- a/secrets/zora/services/kanidm-admin-password.age
+++ b/secrets/zora/services/kanidm-admin-password.age
@@ -1,7 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 whuRpQ yaCtnbl+PhcqP6SAuO73GUnCnQdFp/Auz20/R2OXMH0
-N/TqTzciVJRo/FJdAALFBDLzEveIDBc/IMg4ogv6T8M
--> ssh-ed25519 M75vQg yshoof4MQSFtFUYGmfiud0aAnQN3AHIunF+TBQ8s0jA
-xuE67ay+OVsNC6PQ7/lbJkpNWrbOP0/M/5PVyqQp08M
---- CBH50TQjyCrMDho3hh/5Bp609h2EIrR326YH60111YQ
-�_p*MGƃ������T�����a��7G��Z�nY�@�����|��w���s��+����=
\ No newline at end of file
+-> ssh-ed25519 whuRpQ lCtuCPk/R3lz8qd7WCvyrY1RdJBqYmfLmEvaP2HSRQ8
+btSCbYKU/6NtlTKIvarObl3jh5b1zb8T2C72ItK9Jg8
+-> ssh-ed25519 TFqgIg tDrT5tQ8lLmzHVX4ez00QVoq+tgo8BDRlulbXR9Q2gY
+aJmc0wJ4BZ4VUIirQpr3gWAXdI8Ch3xTMK7sMUhosbk
+--- nS02Bo81ROb1TO5l1s38Rv0/n4KNxPHKRdNwsK8xBa8
+He�󔰜� ��X�l���}�{&��0��8��H��=�ֶ}1��˹M�O��ˆFz}U^
\ No newline at end of file
diff --git a/secrets/zora/services/kanidm-idm-admin-password.age b/secrets/zora/services/kanidm-idm-admin-password.age
index 10707b5..8286298 100644
Binary files a/secrets/zora/services/kanidm-idm-admin-password.age and b/secrets/zora/services/kanidm-idm-admin-password.age differ