From 70f9bbc727d342636d73bf976e4c6c6d4f26c4e8 Mon Sep 17 00:00:00 2001
From: blake <me@blakedheld.xyz>
Date: Wed, 8 Oct 2025 20:04:46 -0500
Subject: [PATCH] 122 current  2025-10-08 20:00:40  25.05.20251006.20c4598 
 6.12.50                          *

---
 flake.nix                          | 2 +-
 modules/system/vpn-confinement.nix | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/flake.nix b/flake.nix
index bf6e533..7ac6e13 100644
--- a/flake.nix
+++ b/flake.nix
@@ -1,6 +1,6 @@
 # flake for blakes nixos config
 # define new devices in outputs
-# generation: 121 current  2025-10-08 19:57:56  25.05.20251006.20c4598  6.12.50                          *
+# generation: 122 current  2025-10-08 20:00:40  25.05.20251006.20c4598  6.12.50                          *
 {
   description = "blakes nix config";
   inputs = {
diff --git a/modules/system/vpn-confinement.nix b/modules/system/vpn-confinement.nix
index bdff7b3..7ce00b8 100644
--- a/modules/system/vpn-confinement.nix
+++ b/modules/system/vpn-confinement.nix
@@ -20,7 +20,7 @@ in
     # Define VPN network namespace
     vpnNamespaces.wgmex = {
       enable = true;
-      wireguardConfigFile = config.sops.secrets."vpncon_mex_config".path;
+      wireguardConfigFile = "${toString config.sops.secrets."vpncon_mex_config".path}";
       accessibleFrom = [
         "10.0.0.0/8"
       ];