diff --git a/hosts/monitoring/nginx.nix b/hosts/monitoring/nginx.nix
index bb61893..9ff3648 100644
--- a/hosts/monitoring/nginx.nix
+++ b/hosts/monitoring/nginx.nix
@@ -7,9 +7,9 @@
     kTLS = true;
     forceSSL = true;
     enableACME = true;
-    basicAuthFile = config.age.secrets.grafana_basic_auth.path;
     locations = {
       "/" = {
+        basicAuthFile = config.age.secrets.grafana_basic_auth.path;
         #proxyPass = "http://";
         #recommendedProxySettings = true;
         return = "418 \"☕️\"";