diff --git a/modules/homelab/services/vaultwarden/default.nix b/modules/homelab/services/vaultwarden/default.nix
index bdaa1e1..bb766e5 100644
--- a/modules/homelab/services/vaultwarden/default.nix
+++ b/modules/homelab/services/vaultwarden/default.nix
@@ -79,7 +79,7 @@ in
     };
 
     # override umask to make permissions work out
-    systemd.services.${services}.serviceConfig = { UMask = lib.mkForce "0007"; };
+    systemd.services.${service}.serviceConfig = { UMask = lib.mkForce "0007"; };
 
     # open firewall
     networking.firewall.allowedTCPPorts = [ cfg.port ];