diff --git a/modules/datasync.nix b/modules/datasync.nix
index 31bc51e..865cf25 100644
--- a/modules/datasync.nix
+++ b/modules/datasync.nix
@@ -68,7 +68,7 @@
 
       [auth]
       type = htpasswd
-      htpasswd_filename = /var/lib/radicale/users
+      htpasswd_filename = /run/keys/radicale
       htpasswd_encryption = plain
       delay = 1
     '';
diff --git a/modules/networking.nix b/modules/networking.nix
index e0e31a3..f49df8f 100644
--- a/modules/networking.nix
+++ b/modules/networking.nix
@@ -1,6 +1,6 @@
 { config, pkgs, lib, ... }:
 
-let password = builtins.readFile /var/lib/ddclient/token;
+let password = builtins.readFile /run/keys/ddclient;
 
 in {