diff --git a/hosts/ward/microvms/kanidm.nix b/hosts/ward/microvms/kanidm.nix
index dda7076..f959f42 100644
--- a/hosts/ward/microvms/kanidm.nix
+++ b/hosts/ward/microvms/kanidm.nix
@@ -88,7 +88,7 @@ in {
     };
 
     provision = {
-      inherit (config.secrets.global.kanidm) persons;
+      inherit (config.repo.secrets.global.kanidm) persons;
 
       # Grafana
       groups.grafana = {};