diff --git a/hosts/server/configuration.nix b/hosts/server/configuration.nix
index 21a56b3..6c28dcc 100644
--- a/hosts/server/configuration.nix
+++ b/hosts/server/configuration.nix
@@ -45,11 +45,11 @@
     lidarr-mb-gap = lib.mkIf config.my.secureHost {
       sopsFile = ../../secrets/env.yaml;
     };
-    "private_keys/lidarr-mb-gap" = lib.mkIf config.my.secureHost {
+    "private_keys/lidarr-mb-gap" = lib.mkIf (config.my.secureHost && config.services.lidarr-mb-gap.enable) {
       sopsFile = ../../secrets/keys.yaml;
       owner = config.users.users.lidarr-mb-gap.name;
       inherit (config.users.users.lidarr-mb-gap) group;
-      path = "~/.ssh/ed25519_lidarr-mb-gap";
+      path = "${config.users.users.lidarr-mb-gap.home}/.ssh/ed25519_lidarr-mb-gap";
     };
   };
   networking = {