diff --git a/hosts/md/hedgedoc.nix b/hosts/md/hedgedoc.nix
index 675617d..ccc67d4 100644
--- a/hosts/md/hedgedoc.nix
+++ b/hosts/md/hedgedoc.nix
@@ -3,9 +3,9 @@
 {
   services.hedgedoc = {
     enable = true;
+    environmentFile = config.age.secrets.hedgedoc_db_password.path;
     settings = {
       domain = "md.${config.networking.domain}";
-      environmentFile = config.age.secrets.hedgedoc_db_password.path;
       dbURL = "postgres://hedgedoc:\${DB_PASSWORD}@sql.berlin.ccc.de:5432/hedgedoc";
       db.dialect = "postgresql";
       protocolUseSSL = true;