diff --git a/secrets/grafana-lapi-key.age b/secrets/grafana-lapi-key.age
new file mode 100644
index 0000000..4b7bdc5
--- /dev/null
+++ b/secrets/grafana-lapi-key.age
@@ -0,0 +1,15 @@
+-----BEGIN AGE ENCRYPTED FILE-----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+-----END AGE ENCRYPTED FILE-----
diff --git a/secrets/jellyfin-lapi-key.age b/secrets/jellyfin-lapi-key.age
new file mode 100644
index 0000000..041c0a4
--- /dev/null
+++ b/secrets/jellyfin-lapi-key.age
@@ -0,0 +1,13 @@
+-----BEGIN AGE ENCRYPTED FILE-----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+-----END AGE ENCRYPTED FILE-----
diff --git a/services/jellyfin/default.nix b/services/jellyfin/default.nix
index 87fcc3b..0b44380 100644
--- a/services/jellyfin/default.nix
+++ b/services/jellyfin/default.nix
@@ -12,7 +12,7 @@ in {
   config = lib.mkIf cfg.enable {
     age.secrets = {
       cs-lapi-key = {
-        file = ../secrets/jellyfin-lapi-key.age;
+        file = ../../secrets/jellyfin-lapi-key.age;
         owner = "crowdsec";
       };
     };