diff --git a/systems/jeeves-jr/services.nix b/systems/jeeves-jr/services.nix
index eb98fe1..20dc8e6 100644
--- a/systems/jeeves-jr/services.nix
+++ b/systems/jeeves-jr/services.nix
@@ -12,7 +12,7 @@
       path = [ pkgs.zfs ];
       serviceConfig = {
         Type = "oneshot";
-        Environment = config.sops.secrets."server-validation/webhook".path;
+        EnvironmentFile = config.sops.secrets."server-validation/webhook".path;
         ExecStart = "${inputs.server_tools.packages.x86_64-linux.default}/bin/validate_jeevesjr";
       };
     };
diff --git a/systems/jeeves/services.nix b/systems/jeeves/services.nix
index 337bde0..4de20ec 100644
--- a/systems/jeeves/services.nix
+++ b/systems/jeeves/services.nix
@@ -19,7 +19,7 @@
         description = "validates startup";
         path = [ pkgs.zfs ];
         serviceConfig = {
-          Environment = config.sops.secrets."server-validation/webhook".path;
+          EnvironmentFile = config.sops.secrets."server-validation/webhook".path;
           Type = "oneshot";
           ExecStart = "${inputs.server_tools.packages.x86_64-linux.default}/bin/validate_jeeves";
         };
diff --git a/systems/palatine-hill/services.nix b/systems/palatine-hill/services.nix
index 692805c..7a8cd25 100644
--- a/systems/palatine-hill/services.nix
+++ b/systems/palatine-hill/services.nix
@@ -12,7 +12,7 @@
       path = [ pkgs.zfs ];
       serviceConfig = {
         Type = "oneshot";
-        Environment = config.sops.secrets."server-validation/webhook".path;
+        EnvironmentFile = config.sops.secrets."server-validation/webhook".path;
         ExecStart = "${inputs.server_tools.packages.x86_64-linux.default}/bin/validate_palatine_hill";
       };
     };