diff --git a/dovecot.nix b/dovecot.nix
index 5b5a243..3e0b6fc 100644
--- a/dovecot.nix
+++ b/dovecot.nix
@@ -263,7 +263,7 @@ in {
       sssd = {
         enable = true;
         # FIXME: pass as config
-        environmentFile = "/run/dovecot-secret/sssd.env";
+        environmentFile = "/run/dovecot-secrets/sssd.env";
         config = ''
           [nss]
           filter_users = root
diff --git a/mail-server.nix b/mail-server.nix
index 20f8abc..dbd3e01 100644
--- a/mail-server.nix
+++ b/mail-server.nix
@@ -214,7 +214,7 @@ in {
           "SSSD_LDAP_BIND_DN=${cfg.ldap.bind-dn}"
           "SSSD_LDAP_AUTH_TOKEN=${readFile cfg.ldap.bind-password-file}"
         ]);
-        target-file = "/run/dovecot-secret/sssd.env";
+        target-file = "/run/dovecot-secrets/sssd.env";
       };
 
       dovecotLdapConfig = {