diff --git a/nixos/zigbee2mqtt.nix b/nixos/zigbee2mqtt.nix
index 0f6e7ebe..a64c1aef 100644
--- a/nixos/zigbee2mqtt.nix
+++ b/nixos/zigbee2mqtt.nix
@@ -36,7 +36,7 @@ in {
             mkAlmostDefault url
           );
       };
-      homeassistant = true;
+      homeassistant.enabled = true;
       permit_join = false;
       frontend = {
         port = 8072;
diff --git a/systems/tei/cloudflared.nix b/systems/tei/cloudflared.nix
index 8f833ad2..6acb212d 100644
--- a/systems/tei/cloudflared.nix
+++ b/systems/tei/cloudflared.nix
@@ -5,10 +5,9 @@
 }: let
   inherit (lib.modules) mkMerge;
   inherit (config.services) nginx;
-  cfg = config.services.cloudflared;
   apartment = "5e85d878-c6b2-4b15-b803-9aeb63d63543";
 in {
-  sops.secrets.cloudflared-tunnel-apartment.owner = cfg.user;
+  sops.secrets.cloudflared-tunnel-apartment.owner = "cloudflared";
   services.cloudflared = {
     tunnels = {
       ${apartment} = {