diff --git a/hosts/metrics/default.nix b/hosts/metrics/default.nix
index 9788988..5c79f70 100644
--- a/hosts/metrics/default.nix
+++ b/hosts/metrics/default.nix
@@ -5,13 +5,18 @@
   ...
 }:
 {
+
+  age.secrets = {
+    tailscale-authKey.file = ../../secrets/tailscale-authKey.age;
+  };
+
   my = {
     utils.commons.enable = true;
 
     networking.tailscale = {
       enable = false;
       exitNode = "vps";
-      # authKeyFile = builtins.toFile "authKey" ''${parameters.tailscaleAuthKey}'';
+      authKeyFile = config.age.secrets.tailscale-authKey.path;
     };
 
     virtualisation = {