diff --git a/modules/server/containers/apps/etherpad.nix b/modules/server/containers/apps/etherpad.nix
index 135a40a..3f1fb6f 100644
--- a/modules/server/containers/apps/etherpad.nix
+++ b/modules/server/containers/apps/etherpad.nix
@@ -122,8 +122,9 @@ in {
   setup = {
     trigger = "server";
     script = pkgs.writeShellScript "setup" ''
-      export $(sops -d ${config.sops.secrets."ETHERPAD".path} | xargs)
-      echo "The API key is $APIKEY" > /opt/APIKEY.txt
+      export $(cat ${config.sops.secrets."ETHERPAD".path} | xargs)
+      echo "$APIKEY" > /opt/APIKEY.txt
+      chmod 0444 /opt/APIKEY.txt
     '';
   };