diff --git a/nixos/modules/deployment.nix b/nixos/modules/deployment.nix
index 2f4462ac0bc0b16719be7738bb0d758ef4d009eb..773c2fa4287b0afe404a3fba74936680200adeae 100755
--- a/nixos/modules/deployment.nix
+++ b/nixos/modules/deployment.nix
@@ -75,10 +75,12 @@ in {
         TMP="$KEY"_tmp
         if [ ! -e "$KEY" ]; then
           mkdir -p ~deployment/.ssh ~root/.ssh
+          chown deployment ~deployment/.ssh
           ${pkgs.openssh}/bin/ssh-keygen -f "$TMP"
           cat "$TMP".pub >> ~root/.ssh/authorized_keys
           mv "$TMP".pub "$KEY".pub
           mv "$TMP" "$KEY"
+          chown deployment "$KEY"
         fi
       '';
     };