diff --git a/modules/system/vpns.nix b/modules/system/vpns.nix
index 3b11dff..5a841ac 100644
--- a/modules/system/vpns.nix
+++ b/modules/system/vpns.nix
@@ -52,7 +52,7 @@ in
     };
 
     # secrets only if VPN is enabled
-    sops.secrets = lib.mkIf cfg.vpns.enabled {
+    sops.secrets = lib.mkIf cfg.enable {
       "wg_pia_mexico_key" = { owner = "root"; group = "root"; };
       "pia_auth" = { owner = "root"; group = "root"; };
       "openvpn_pia_mexico_config" = {owner = "root"; group = "root"; };