diff --git a/flake.nix b/flake.nix
index 9f1ae6b..89b48a0 100644
--- a/flake.nix
+++ b/flake.nix
@@ -207,6 +207,7 @@
                 motiejus-server-passwd-hash.file = ./secrets/motiejus_server_passwd_hash.age;
                 root-server-passwd-hash.file = ./secrets/root_server_passwd_hash.age;
                 sasl-passwd.file = ./secrets/postfix_sasl_passwd.age;
+                headscale-client-oidc.file = ./secrets/headscale/oidc_client_secret2.age;
                 borgbackup-password.file = ./secrets/fwminex/borgbackup-password.age;
                 syncthing-key.file = ./secrets/fwminex/syncthing/key.pem.age;
                 syncthing-cert.file = ./secrets/fwminex/syncthing/cert.pem.age;
diff --git a/secrets.nix b/secrets.nix
index 10dfd8a..a933728 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -34,7 +34,6 @@ in
   "secrets/vno1-oh2/borgbackup/password.age"
   "secrets/grafana.jakstys.lt/oidc.age"
   "secrets/letsencrypt/account.key.age"
-  "secrets/headscale/oidc_client_secret2.age"
   "secrets/vaultwarden/secrets.env.age"
   "secrets/photoprism/admin_password.age"
 
@@ -53,10 +52,16 @@ in
   "secrets/mtworx/syncthing/key.pem.age"
   "secrets/mtworx/syncthing/cert.pem.age"
 ]
+// mk (
+  [
+    fwminex
+    vno1-oh2
+  ]
+  ++ motiejus
+) [ "secrets/headscale/oidc_client_secret2.age" ]
 // mk ([ fwminex ] ++ motiejus) [
   "secrets/motiejus_server_passwd_hash.age"
   "secrets/root_server_passwd_hash.age"
-  "secrets/headscale/oidc_client_secret2.age"
 
   "secrets/fwminex/borgbackup-password.age"
   "secrets/fwminex/syncthing/key.pem.age"
diff --git a/secrets/headscale/oidc_client_secret2.age b/secrets/headscale/oidc_client_secret2.age
index 2a5cc37..b8cf7c4 100644
Binary files a/secrets/headscale/oidc_client_secret2.age and b/secrets/headscale/oidc_client_secret2.age differ