diff --git a/machines/modules/malobeo/users.nix b/machines/modules/malobeo/users.nix
index e216c03..6dc8c63 100644
--- a/machines/modules/malobeo/users.nix
+++ b/machines/modules/malobeo/users.nix
@@ -10,13 +10,16 @@ in
   };
   config = lib.mkMerge [
     (lib.mkIf cfg.malobeo {
-      sops.secrets.malobeoUserPassword.neededForUsers = true;
+      sops.secrets.malobeoUserPassword = {
+        sopsFile = ./secrets.yaml;
+        neededForUsers = true;
+      };
       users.users.malobeo = {
         isNormalUser = true;
         description = "malobeo user, password and ssh access, no root";
         extraGroups = [ "pipewire" "pulse-access" "scanner" "lp" ];
         openssh.authorizedKeys.keys = sshKeys.admins;
-        hashedPassword = config.sops.secrets.malobeoUserPassword.path;
+        hashedPasswordFile = config.sops.secrets.malobeoUserPassword.path;
       };
       environment.systemPackages = with pkgs; [];
     })