diff --git a/flake.nix b/flake.nix
index 9ecce5a..ee607cc 100644
--- a/flake.nix
+++ b/flake.nix
@@ -270,8 +270,8 @@
                 group = "forgejo";
                 mode = "0440";
               };
-              forgejo-oauth2-jwt-token = {
-                file = ./secrets/forgejo-oauth2-jwt-token.age;
+              forgejo-oauth2-jwt-secret = {
+                file = ./secrets/forgejo-oauth2-jwt-secret.age;
                 owner = "forgejo";
                 group = "forgejo";
                 mode = "0440";
diff --git a/hosts/git/forgejo.nix b/hosts/git/forgejo.nix
index c35b604..0235292 100644
--- a/hosts/git/forgejo.nix
+++ b/hosts/git/forgejo.nix
@@ -23,7 +23,7 @@ in
           SECRET_KEY = lib.mkDefault config.age.secrets.forgejo-secret-key.path;
           INTERNAL_TOKEN = lib.mkDefault config.age.secrets.forgejo-internal-token.path;
         };
-        oauth2.JWT_SECRET = lib.mkDefault config.age.secrets.forgejo-oauth2-jwt-token.path;
+        oauth2.JWT_SECRET = lib.mkDefault config.age.secrets.forgejo-oauth2-jwt-secret.path;
       };
       settings = {
         security.GLOBAL_TWO_FACTOR_REQUIREMENT = "all";