diff --git a/log/002-soppy-wet-nix.doll b/log/002-soppy-wet-nix.doll
index eb77ba3..95a8a2c 100644
--- a/log/002-soppy-wet-nix.doll
+++ b/log/002-soppy-wet-nix.doll
@@ -307,7 +307,7 @@ tags: nix, devops
 				{ config, ... }: {
 					# the "ovpn_file" here matches the YAML key above.
 					sops.secrets.ovpn_file = {
-						sopsFile = ../machine-1/secrets.yaml
+						sopsFile = ../secrets/machine-1/secrets.yaml
 					};
 
 					services.openvpn.servers.doll = {
@@ -334,15 +334,15 @@ tags: nix, devops
 			[codeblock::
 				{ config, ... }: {
 					sops.secrets.ovpn_file = {
-						sopsFile = ../machine-1/secrets.yaml
+						sopsFile = ../secrets/machine-1/secrets.yaml
 					};
 
 					# our two new friends
 					sops.secrets.ovpn_username = {
-						sopsFile = ../machine-1/secrets.yaml
+						sopsFile = ../secrets/machine-1/secrets.yaml
 					};
 					sops.secrets.ovpn_password = {
-						sopsFile = ../machine-1/secrets.yaml
+						sopsFile = ../secrets/machine-1/secrets.yaml
 					};
 
 					# this is just how openvpn likes it. no typos.