diff --git a/modules/system/vpns.nix b/modules/system/vpns.nix
index 5f47839..65eb243 100644
--- a/modules/system/vpns.nix
+++ b/modules/system/vpns.nix
@@ -35,12 +35,12 @@ in
           tls-client
           remote-cert-tls server
 
-          auth-user-pass ${config.sops.secrets."openvpn_pia_mexico_auth".path}
+          auth-user-pass /run/secrets/openvpn_pia_mexico_auth
           compress
           verb 1
           reneg-sec 0
-          crl-verify ${config.sops.secrets."openvpn_pia_mexico_crl".path}
-          ca ${config.sops.secrets."openvpn_pia_mexico_crt".path}
+          crl-verify /run/secrets/openvpn_pia_mexico_crl
+          ca /run/secrets/openvpn_pia_mexico_crt
 
           disable-occ
                   '';