diff --git a/netoik-git.spec b/netoik-git.spec
index fa30859..ab6375a 100644
--- a/netoik-git.spec
+++ b/netoik-git.spec
@@ -44,9 +44,10 @@ mv $GITEA_BINARY %{_sbindir}/gitea
 # Replace secrets in app.ini
 export INTERNAL_TOKEN=$(runuser --user=gitea -- gitea generate secret INTERNAL_TOKEN)
 export JWT_SECRET=$(runuser --user=gitea -- gitea generate secret JWT_SECRET)
-export SECRET_KEY=$(runuser --user=gitea -- gitea generate secret SECRET_TOKEN)
+export SECRET_KEY=$(runuser --user=gitea -- gitea generate secret SECRET_KEY)
 envsubst < %{_sysconfdir}/gitea/app.ini > %{_sysconfdir}/gitea/.app.ini.new
 mv %{_sysconfdir}/gitea/.app.ini.new %{_sysconfdir}/gitea/app.ini
+chmod 640 %{_sysconfdir}/gitea/app.ini
 chown root:gitea %{_sysconfdir}/gitea/app.ini
 
 # Add lugit theme
@@ -73,7 +74,7 @@ fi
 # Download and install act_runner binary
 export ACTRUNNER_BINARY=act_runner-0.3.0-linux-$ARCH
 wget --output-document $ACTRUNNER_BINARY.xz https://gitea.com/gitea/act_runner/releases/download/v0.3.0/$ACTRUNNER_BINARY.xz
-wget --output-docutment $ACTRUNNER_BINARY.xz.sha256 https://gitea.com/gitea/act_runner/releases/download/v0.3.0/$ACTRUNNER_BINARY.xz.sha256
+wget --output-document $ACTRUNNER_BINARY.xz.sha256 https://gitea.com/gitea/act_runner/releases/download/v0.3.0/$ACTRUNNER_BINARY.xz.sha256
 cat $ACTRUNNER_BINARY.xz.sha256 | sha256sum --check --status
 unxz $ACTRUNNER_BINARY.xz
 chmod 755 $ACTRUNNER_BINARY