diff --git a/hosts/dnsc-server/default.nix b/hosts/dnsc-server/default.nix
index e219bde..07e5bee 100644
--- a/hosts/dnsc-server/default.nix
+++ b/hosts/dnsc-server/default.nix
@@ -38,9 +38,6 @@
     identityPaths = [ "${config.users.users.dennis.home}/.ssh/id_ed25519" ];
     secrets."restic/password" = {
       file = ../../secrets/restic/password.age;
-      # backrest reads the password via "file:<path>" in its repo config
-      group = "backrest";
-      mode = "0440";
     };
   };