diff --git a/hosts/tsuki/services/matrix/default.nix b/hosts/tsuki/services/matrix/default.nix
index 01b32ce..7d70655 100644
--- a/hosts/tsuki/services/matrix/default.nix
+++ b/hosts/tsuki/services/matrix/default.nix
@@ -1,5 +1,4 @@
-{ pkgs, lib, config, secrets, ... }: {
-
+{ pkgs, lib, config, ... }: {
   imports = [
     ./bridges/matrix-appservice-irc.nix
 
@@ -9,6 +8,12 @@
     ./coturn.nix
   ];
 
+  sops.secrets."matrix_synapse/registration_secret" = {
+    owner = "matrix-synapse";
+    group = "matrix-synapse";
+    mode = "0440";
+  };
+
   services.matrix-synapse-next = {
     enable = true;
     enableNginx = true;
@@ -58,7 +63,7 @@
       # with the registration shared secret
       enable_registration = false;
 
-      registration_shared_secret = secrets.keys.matrix.registration-shared-secret;
+      registration_shared_secret_path = config.sops.secrets."matrix_synapse/registration_secret".path;
       allow_public_rooms_over_federation = true;
 
       # password_config.enabled = lib.mkForce false;