diff --git a/systems/x86_64-linux/sgx/default.nix b/systems/x86_64-linux/sgx/default.nix
index 3b6fced..6c15c83 100644
--- a/systems/x86_64-linux/sgx/default.nix
+++ b/systems/x86_64-linux/sgx/default.nix
@@ -4,6 +4,8 @@ with lib.plusultra;
 {
   imports = [ ./hardware-configuration.nix ];
 
+  sops.secrets.pccs.sopsFile = ../../../.secrets/sgx/pccs.yaml;
+
   plusultra = {
     base.enable = true;
     gui.enable = false;
@@ -25,10 +27,6 @@ with lib.plusultra;
   security.tpm2.enable = false;
   security.tpm2.abrmd.enable = false;
 
-  sops.secrets.pccs = {
-    sopsFile = ../../../.secrets/sgx/pccs.yaml; # bring your own password file
-  };
-
   networking.wireless.enable = false; # Enables wireless support via wpa_supplicant.
 
   services.aesmd.enable = true;