diff --git a/machines/dev/fedi203/woodpecker.nix b/machines/dev/fedi203/woodpecker.nix
index d75f558e..f98852f8 100644
--- a/machines/dev/fedi203/woodpecker.nix
+++ b/machines/dev/fedi203/woodpecker.nix
@@ -10,28 +10,19 @@
     defaults.email = "something@fediversity.eu";
   };
 
-  age.secrets = {
-    woodpecker-gitea-client = {
-      owner = "woodpecker-server";
-      group = "woodpecker-server";
-      mode = "440";
-    };
-    woodpecker-gitea-secret = {
-      owner = "woodpecker-server";
-      group = "woodpecker-server";
-      mode = "440";
-    };
-    woodpecker-agent-exec = {
-      owner = "woodpecker-agent-exec";
-      group = "woodpecker-agent-exec";
-      mode = "440";
-    };
-    woodpecker-agent-container = {
-      owner = "woodpecker-agent-docker";
-      group = "woodpecker-agent-docker";
-      mode = "440";
-    };
-  };
+  age.secrets =
+    lib.mapAttrs
+      (_: owner: {
+        inherit owner;
+        group = owner;
+        mode = "440";
+      })
+      {
+        woodpecker-gitea-client = "woodpecker-server";
+        woodpecker-gitea-secret = "woodpecker-server";
+        woodpecker-agent-exec = "woodpecker-agent-exec";
+        woodpecker-agent-container = "woodpecker-agent-docker";
+      };
 
   # needs `sudo generate-vars`
   vars.settings.on-machine.enable = true;