diff --git a/flake/agenix-rekey.nix b/flake/agenix-rekey.nix
index 060ccac..c304257 100644
--- a/flake/agenix-rekey.nix
+++ b/flake/agenix-rekey.nix
@@ -12,7 +12,7 @@
     # The identities that are used to rekey agenix secrets and to
     # decrypt all repository-wide secrets.
     secretsConfig = {
-      masterIdentities = [ "\"$DEVSHELL_DIR\"/secrets/yk1-nix-rage.pub" ];
+      masterIdentities = [ "\"$PRJ_ROOT\"/secrets/yk1-nix-rage.pub" ];
       extraEncryptionPubkeys = [ ../secrets/backup.pub ];
     };
   };