diff --git a/common/secrets/default.nix b/common/secrets/default.nix
index 7944a47..047b382 100644
--- a/common/secrets/default.nix
+++ b/common/secrets/default.nix
@@ -4,7 +4,7 @@
   lib,
   pkgs,
   ...
-}@args:
+}:
 
 let
   ccfg = import ../config.nix;
diff --git a/hosts/h001/mods/oauth2-proxy.nix b/hosts/h001/mods/oauth2-proxy.nix
index 9a5001c..a5829a9 100644
--- a/hosts/h001/mods/oauth2-proxy.nix
+++ b/hosts/h001/mods/oauth2-proxy.nix
@@ -9,7 +9,7 @@
     redirectURL = "https://sso-proxy.joshuabell.xyz/oauth2/callback";
     validateURL = "https://sso.joshuabell.xyz/oauth2/";
     oidcIssuerUrl = "https://sso.joshuabell.xyz:443";
-    keyFile = config.age.secrets.oauth2_proxy_zitadel_client_secret.path;
+    keyFile = config.age.secrets.oauth2_key_file.path;
     nginx.domain = "sso-proxy.joshuabell.xyz";
     email.domains = [ "*" ];
     # extraConfig = {