diff --git a/flake.lock b/flake.lock
index 79666f9..9f3a31e 100644
--- a/flake.lock
+++ b/flake.lock
@@ -732,13 +732,13 @@
     "secret": {
       "flake": false,
       "locked": {
-        "lastModified": 1636145225,
-        "narHash": "sha256-pQpattmS9VmO3ZIQUFn66az8GSmB4IvYhTTCFn6SUmo=",
-        "path": "/var/empty",
+        "lastModified": 1686920512,
+        "narHash": "sha256-FUZSDRLVdz6margPVrtoKUg63BdxfRNENeUUOxTiIS4=",
+        "path": "/home/main/dotfiles2/secret",
         "type": "path"
       },
       "original": {
-        "path": "/var/empty",
+        "path": "/home/main/dotfiles2/secret",
         "type": "path"
       }
     },
diff --git a/flake.nix b/flake.nix
index 5733e4c..1c4d1db 100644
--- a/flake.nix
+++ b/flake.nix
@@ -26,7 +26,7 @@
     vtermModule.url = "github:akermu/emacs-libvterm";
     vtermModule.flake = false;
 
-    secret.url = "path:///var/empty";
+    secret.url = "path:///home/main/dotfiles2/secret";
     secret.flake = false;
 
     ical2org.url = "git+https://git.sr.ht/~magic_rb/ical2orgpy";
@@ -108,11 +108,11 @@
       uterranix.config = [
         ./terranix/default.nix
         {
-          _module.args.secret = secret;
+          _module.args.secret = lib'.loadSecrets secret;
           _module.args.vars = {
-            flake_rev = self.rev or null;
-            flake_sha = self.sha or null;
-            flake_ref = self.ref or null;
+            flake_rev = self.rev;
+            flake_sha = self.narHash;
+            flake_ref = "master";
             flake_host = "git+https://git.sr.ht/~magic_rb/cluster";
           };
         }