diff --git a/flake.nix b/flake.nix
index f07ba83..6d8bf88 100644
--- a/flake.nix
+++ b/flake.nix
@@ -111,8 +111,9 @@
       ] ++ modules;
       #++ flake-programs-sqlite.nixosModules.programs-sqlite; # TODO: make work
 
-      sops = lib.mkIf (builtins.pathExists ./secrets/${hostname}.yaml) {
-        defaultSopsFile = ./secrets/${hostname}.yaml;
+      sops = {
+        defaultSopsFile = lib.mkIf (builtins.pathExists ./secrets/${hostname}.yaml)
+          ./secrets/${hostname}.yaml;
         age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
         age.keyFile = "/var/lib/sops-nix/key.txt";
         age.generateKey = true;