diff --git a/containers/getmail/default.nix b/containers/getmail/default.nix
index 92a4e99..c8910b9 100644
--- a/containers/getmail/default.nix
+++ b/containers/getmail/default.nix
@@ -62,7 +62,7 @@ nglib.makeSystem {
             shutdownOnExit = true;
             script = pkgs.writeShellScript "getmail-run"
               ''
-                export PATH=${with pkgs; lib.makeBinPath [ busybox runit bash getmail6-fixed maildrop-fixed ]}:${pkgs.opensmtpd}/libexec/opensmtpd:$PATH
+                export PATH=${with pkgs; lib.makeBinPath [ jq busybox runit bash getmail6-fixed maildrop-fixed ]}:${pkgs.opensmtpd}/libexec/opensmtpd:$PATH
 
                 chown vmail:vmail -R /getmail.d
 
diff --git a/nomad/regions/homelab-1/job/email.hcl b/nomad/regions/homelab-1/job/email.hcl
index 026181f..816a1ef 100644
--- a/nomad/regions/homelab-1/job/email.hcl
+++ b/nomad/regions/homelab-1/job/email.hcl
@@ -68,7 +68,16 @@ job "email" {
         entrypoint = [ "init" ]
       }
 
-      env {
+      vault {
+        policies = ["getmail-policy"]
+      }
+
+      template {
+        data = <<EOF
+{{ secret "kv/data/getmail" | toJSON }}
+EOF
+        destination = "secrets/getmail.passwd"
+        change_mode = "restart"
       }
 
       resources {