diff --git a/services/forgejo/default.nix b/services/forgejo/default.nix
index c2bf08c..44539d4 100644
--- a/services/forgejo/default.nix
+++ b/services/forgejo/default.nix
@@ -14,8 +14,10 @@ in {
     };
   };
   config = lib.mkIf cfg.enable {
+    age.secrets.forgejoDBPass.file = ./secrets/forgejoDBPass.age;
     services.forgejo = {
       enable = true;
+      package = pkgs.forgejo;
       user = "tbarnouin";
       settings = {
         server.HTTP_PORT = 3000;
@@ -29,7 +31,7 @@ in {
         host = "${cfg.pgsql_ip}";
         name = "gitea";
         user = "gitea";
-        passwordFile = "/run/secrets/forgejo/forgejo-dbpass";
+        passwordFile = config.age.secrets.forgejoDBPass.path;
       };
     };
     networking.firewall.allowedTCPPorts = [3000];