diff --git a/age/default.nix b/age/default.nix
index d110656c..4ca5bfe5 100644
--- a/age/default.nix
+++ b/age/default.nix
@@ -19,7 +19,7 @@
         gen =
           ns: owner: group: mode:
           self.lib.genAttrs ns (n: {
-            file = "./sec/${n}.age";
+            file = self + "/sec/${n}.age";
             inherit owner group mode;
           });
         hard = i: gen i "root" "users" "400";
diff --git a/hosts/azasos/rekey.nix b/hosts/azasos/rekey.nix
index c5fc2c4c..b533e92c 100644
--- a/hosts/azasos/rekey.nix
+++ b/hosts/azasos/rekey.nix
@@ -19,31 +19,31 @@ in
     secrets =
       {
         wga = {
-          file = "./sec/wga.age";
+          file = self + "/sec/wga.age";
           owner = "systemd-network";
           group = "root";
           mode = "400";
         };
 
         hyst-us-cli = {
-          file = "./sec/hyst-us-cli.age";
+          file = self + "/sec/hyst-us-cli.age";
           mode = "640";
           owner = "root";
           group = "users";
           name = "hyst-us-cli.yaml";
         };
         shadow-tls-relay = {
-          file = "./sec/shadow-tls-relay.age";
+          file = self + "/sec/shadow-tls-relay.age";
         };
         hyst-osa-cli = {
-          file = "./sec/hyst-osa-cli.age";
+          file = self + "/sec/hyst-osa-cli.age";
           mode = "640";
           owner = "root";
           group = "users";
           name = "hyst-osa-cli.yaml";
         };
         hyst-hk-cli = {
-          file = "./sec/hyst-hk-cli.age";
+          file = self + "/sec/hyst-hk-cli.age";
           mode = "640";
           owner = "root";
           group = "users";
@@ -59,7 +59,7 @@ in
             (
               n:
               nameValuePair "hyst-${n}-cli" {
-                file = "./sec/hyst-${n}-cli.age";
+                file = self + "/sec/hyst-${n}-cli.age";
                 mode = "640";
                 owner = "root";
                 group = "users";