diff --git a/nix/module-eval/core-toggle.nix b/nix/module-eval/core-toggle.nix
index 86738ad7..df8c2608 100644
--- a/nix/module-eval/core-toggle.nix
+++ b/nix/module-eval/core-toggle.nix
@@ -620,9 +620,9 @@ let
           s = allLocal.systemd.services;
         in
         ds.jsonData.httpHeaderName1 == "Authorization"
-        && ds.secureJsonData.httpHeaderValue1 == "$__file{/var/lib/grafana-metrics/bearer}"
+        && ds.secureJsonData.httpHeaderValue1 == "$__file{/run/swarm-grafana-secrets/metrics-bearer}"
         && lib.hasInfix "bao kv put -cas=0 secret/${leaf} value=-" bearerUnit.script
-        && lib.hasInfix "/var/lib/nixos-containers/swarm-grafana/var/lib/grafana-metrics/bearer \"Bearer $bearer\"" bearerUnit.script
+        && lib.hasInfix "/run/swarm-grafana-secrets/metrics-bearer \"Bearer $bearer\"" bearerUnit.script
         && lib.hasInfix "--store-path ${leaf}" s.swarm-metrics-auth.serviceConfig.ExecStart
         && lib.hasInfix "path \"secret/data/${leaf}\" {\n  capabilities = [\"read\"]\n}" s.swarm-bao-metrics-auth-policy.script
         && lib.hasInfix "path \"secret/data/${leaf}\" {\n  capabilities = [\"create\", \"read\"]\n}" s.swarm-bao-grafana-oidc-policy.script;