diff --git a/flake.lock b/flake.lock
index a350be8..1d66c44 100755
--- a/flake.lock
+++ b/flake.lock
@@ -90,10 +90,10 @@
     "nix-secrets": {
       "flake": false,
       "locked": {
-        "lastModified": 1746847489,
-        "narHash": "sha256-XdN5/g8P46KcD7e0QrM/4DbwGlIDARV+QEhkqppv1h8=",
+        "lastModified": 1746848091,
+        "narHash": "sha256-9GFukq+Sg9cQcZTuj5w4ZBaUVpSGJdvTGbSoS07qRxY=",
         "ref": "main",
-        "rev": "c40a7bb8f2decc26df74c18e6a9a865fd803bf24",
+        "rev": "916a9f2a29bcc2b55ec4f4c1404f6bf9a6f9d6d6",
         "shallow": true,
         "type": "git",
         "url": "https://git.terah.dev/imterah/sops"
diff --git a/hosts/andromeda/stacks/synapse/docker-compose.nix b/hosts/andromeda/stacks/synapse/docker-compose.nix
index 4da96eb..d051590 100644
--- a/hosts/andromeda/stacks/synapse/docker-compose.nix
+++ b/hosts/andromeda/stacks/synapse/docker-compose.nix
@@ -49,6 +49,7 @@
     image = "docker.io/matrixdotorg/synapse:latest";
     environment = {
       "SYNAPSE_CONFIG_PATH" = "/data/homeserver.yaml";
+      # This sends a signal to Synapse's init code for ownership things: https://github.com/matrix-org/synapse/blob/develop/docker/start.py#L202
       "UID" = "0";
       "GID" = "0";
     };
diff --git a/secrets b/secrets
index b1a2a6a..916a9f2 160000
--- a/secrets
+++ b/secrets
@@ -1 +1 @@
-Subproject commit b1a2a6a7a4c8b75bfcbf8d5cd066dcc201441332
+Subproject commit 916a9f2a29bcc2b55ec4f4c1404f6bf9a6f9d6d6