diff --git a/modules/services/jellyfin.nix b/modules/services/jellyfin.nix
index 508c513..e1f5599 100644
--- a/modules/services/jellyfin.nix
+++ b/modules/services/jellyfin.nix
@@ -372,7 +372,7 @@ in
       {
         id = cfg.oidcClientID;
         description = "Jellyfin";
-        secret = "jbmVCAZluESWbOvbKQtHhjwcuaNjlMVaidMbJGKaHXHPOmwilCWYBFAQtrnohJzIhbuhWTBwhbDKLmdtyrLXeankWgXNspWCmJxzayHiHRvOPDbcsnquYReI";
+        secretFile = config.sops.secrets."jellyfin/sso_secret".path;
         public = "false";
         authorization_policy = "one_factor";
         redirect_uris = [ "https://${cfg.subdomain}.${cfg.domain}/sso/OID/r/${cfg.oidcProvider}" ];