diff --git a/modules/services/reverseproxy.nix b/modules/services/reverseproxy.nix
index 6086350..8dd4dfa 100644
--- a/modules/services/reverseproxy.nix
+++ b/modules/services/reverseproxy.nix
@@ -158,6 +158,11 @@ in
       };
     };
 
+    age.secrets.anubis-secret = {
+      file = ../../secrets/reverseproxy/anubis-secret.age;
+      owner = "anubis";
+    };
+
     services = mkIf cfg.enable {
       anubis = {
         defaultOptions.group = "nginx";
@@ -174,7 +179,7 @@ in
               REDIRECT_DOMAINS = "${vhostName}.crans.${mainTld}";
               SOCKET_MODE = "0660";
               # Secret partagé entre les instances
-              ED25519_PRIVATE_KEY_HEX_FILE = "${../../../secrets/reverseproxy/anubis-secret.age}";
+              ED25519_PRIVATE_KEY_HEX_FILE = config.age.secrets.anubis-secret.path;
               # OpenGraph config
               OG_PASSTHROUGH = vhostConfig.anubisOpenGraph;
               OG_EXPIRY_TIME = "24h";