diff --git a/services/jellyfin/default.nix b/services/jellyfin/default.nix
index 7bc005a..87fcc3b 100644
--- a/services/jellyfin/default.nix
+++ b/services/jellyfin/default.nix
@@ -10,6 +10,12 @@ in {
     enable = lib.mkEnableOption "Enable minimal config";
   };
   config = lib.mkIf cfg.enable {
+    age.secrets = {
+      cs-lapi-key = {
+        file = ../secrets/jellyfin-lapi-key.age;
+        owner = "crowdsec";
+      };
+    };
     systemd.services.jellyfin.environment.LIBVA_DRIVER_NAME = "iHD";
     environment = {
       sessionVariables = { LIBVA_DRIVER_NAME = "iHD"; };
@@ -40,6 +46,7 @@ in {
         hub.collections = [
           "LePresidente/jellyfin"
         ];
+        settings.lapi.credentialsFile = "${config.age.secrets.jellyfin-lapi-key.path}";
         localConfig = {
           acquisitions = [
             {
diff --git a/systems/minimalVMConfig.nix b/systems/minimalVMConfig.nix
index 4e2e0da..e802fa4 100644
--- a/systems/minimalVMConfig.nix
+++ b/systems/minimalVMConfig.nix
@@ -1,6 +1,5 @@
 {
-  config,
-  pkgs,
+  config, pkgs,
   lib,
   inputs,
   modulesPath,
@@ -86,13 +85,6 @@
     ];
   };
 
-  age.secrets = {
-    cs-lapi-key = {
-      file = ../secrets/cs-lapi-key.age;
-      owner = "crowdsec";
-    };
-  };
-
   services = {
     cloud-init.network.enable = true;
     openssh = {
@@ -119,7 +111,6 @@
         general = {
           prometheus.listen_addr = "0.0.0.0";
         };
-        lapi.credentialsFile = "${config.age.secrets.cs-lapi-token.path}";
       };
       hub.collections = [
         "crowdsecurity/linux"