diff --git a/modules/system/vpn-confinement.nix b/modules/system/vpn-confinement.nix
index 7ce00b8..d8ea960 100644
--- a/modules/system/vpn-confinement.nix
+++ b/modules/system/vpn-confinement.nix
@@ -20,7 +20,7 @@ in
     # Define VPN network namespace
     vpnNamespaces.wgmex = {
       enable = true;
-      wireguardConfigFile = "${toString config.sops.secrets."vpncon_mex_config".path}";
+      wireguardConfigFile = "${config.sops.secrets."vpncon_mex_config".path}";
       accessibleFrom = [
         "10.0.0.0/8"
       ];