diff --git a/.sops.yaml b/.sops.yaml
index 02277bc..fbfb7c1 100644
--- a/.sops.yaml
+++ b/.sops.yaml
@@ -1,7 +1,7 @@
 keys:
   - &primary age156gze6ecg8xpgg3gc049tqprts5dl5apr7020cu70ukpsta3qvpsldd6kh
 creation_rules:
-  - path_regex: secrets/.*$
+  - path_regex: ./.*$
     key_groups:
       - age:
         - *primary
diff --git a/deemz.org/configuration.nix b/deemz.org/configuration.nix
index 31fc91e..6921fa5 100644
--- a/deemz.org/configuration.nix
+++ b/deemz.org/configuration.nix
@@ -19,6 +19,7 @@ let secrets = import ../secrets.nix; in
     owner = "nginx";
     group = "nginx";
     sopsFile = ./secrets/nginx-users;
+    format = "binary";
   };
   sops.secrets."duckdns_token" = {
     owner = "duckdns";
diff --git a/secrets/nginx-users b/deemz.org/secrets/nginx-users
similarity index 100%
rename from secrets/nginx-users
rename to deemz.org/secrets/nginx-users
diff --git a/secrets/secrets.yaml b/deemz.org/secrets/secrets.yaml
similarity index 100%
rename from secrets/secrets.yaml
rename to deemz.org/secrets/secrets.yaml