diff --git a/modules/nixos/services/agenix/default.nix b/modules/nixos/services/agenix/default.nix
index 2839e1c8..d7f9207d 100644
--- a/modules/nixos/services/agenix/default.nix
+++ b/modules/nixos/services/agenix/default.nix
@@ -58,6 +58,7 @@ in {
       (mkIf cfg.sobotka.enable {
         secrets = {
           cloudflareFirewallApiKey.file = "${self}/secrets/cloudflareFirewallApiKey.age";
+          vaultwardenCloudflared.file = "${self}/secrets/vaultwardenCloudflared.age";
           vaultwarden-env.file = "${self}/secrets/vaultwarden-env.age";
         };
       })
diff --git a/modules/server/vaultwarden/default.nix b/modules/server/vaultwarden/default.nix
index ad56fcba..5d4bad8e 100644
--- a/modules/server/vaultwarden/default.nix
+++ b/modules/server/vaultwarden/default.nix
@@ -15,7 +15,7 @@ in {
       enable = mkEnableOption "Enables vaultwarden";
       url = lib.mkOption {
         type = lib.types.str;
-        default = "pass.${cfg.domain}";
+        default = "vault.${cfg.domain}";
       };
       cloudflared = {
         credentialsFile = lib.mkOption {