diff --git a/modules/nixos/common/otf.nix b/modules/nixos/common/otf.nix
index 27692fe..bbc8e03 100644
--- a/modules/nixos/common/otf.nix
+++ b/modules/nixos/common/otf.nix
@@ -36,14 +36,11 @@ in
         );
       default = {
         OTF_ADDRESS = "localhost:9000";
-        OTF_SITE_TOKEN = "my-token";
-        OTF_SSL = "false";
-        # the application needs a secret for encryption and other things
-        # TODO: make mechanism to load via file
-        OTF_SECRET = "f73e55eada59bd1c37d69ae3bbacd982";
-        # more options can be set but these are a reminder for myself
-        OTF_CERT_FILE = "";
-        OTF_KEY_FILE = "";
+        # OTF_SITE_TOKEN = "my-token";
+        # OTF_SSL = "false";
+        # OTF_SECRET = "";
+        # OTF_CERT_FILE = "";
+        # OTF_KEY_FILE = "";
       };
       description = "Environment variables for the OTF service.";
     };
diff --git a/secrets.yaml b/secrets.yaml
index 42c10f1..f901c48 100644
--- a/secrets.yaml
+++ b/secrets.yaml
@@ -1,4 +1,4 @@
-otfenv: ENC[AES256_GCM,data:di+SAxH65nRJJFhBzKQ0VwRcLT9RrLfr9VLvZQUwfD60YlvWQD6lGoxsbLakdorBVLAFVda5wLxcH1AbhNP4sWkWsNQeI+GJrW8K8rz1,iv:uleGmUbinqQMU+d6jXJrtccKWSUBGAznK4o6zJtxd1Q=,tag:k5+ViYUJugp8glwl1vu2RA==,type:str]
+otfenv: ENC[AES256_GCM,data:HwZC2IPM9w5FqFlpc/zLA+m9bSC6m19hnvuS103Iwct84QM/HHkez3pdLdCZM5tNZN+oItxMHcIizbcA7mQn1eezdt+Pb9RC4hk=,iv:rcvPhmVEg79XPpJ6o8/DBP4YgN+lgjvxLB1mJYARdCo=,tag:SSZiiKngO+vWjcEppnhARg==,type:str]
 sops:
     age:
         - recipient: age1g4j0hun2ttt7h8870zf5pm7nqgw9p23r6mjj9vpm4guqetvth34s8v3t3w
@@ -19,7 +19,7 @@ sops:
             MlJ1bjRvS0VQMkRFSG0yNDc5Y3lSM28KS50BUA6S61AJYZRefGbW76TotkDOv1FD
             Q1CyfEDDkrhbUPtPeOagG3tStP9ZfkRRfmm7TzkB4PfHDTpfAg6V/g==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-14T18:26:35Z"
-    mac: ENC[AES256_GCM,data:FmHsg5h50Za2WUFe00ZRIw3RR8sKDj2X2ZjtaXhkdcHKMKxvycs9Uh77hHXWK7/70YBxEDv8Ry32lFF+n2tHHC0FFXSXlWyaW0ydiIH/ruHoF/fa5ZnTjFpTxSo1o0iARl+lfe5MjfAyYgplWOxXCzXajgYGZbr4CkMofHQBeuI=,iv:3hOEmXqBv9aupUw89hUd9+s39Pt1//NTZLCb9CXaP9w=,tag:A2PPg7JOuXGXlq6RVUbD6g==,type:str]
+    lastmodified: "2025-06-14T18:56:57Z"
+    mac: ENC[AES256_GCM,data:oPKok5QCr8edihXzZUZl3+5Abss6OMas4rYqQZWeLkkIX+b3uzCi0p6KJsZK1SyxZC48Wa4ax8cGLb1BOIQVCjyR80OkXDzQACee9War2LVceXcoT1ARqgl21nthmckLxYzs+YOxWbB3gFQNOD09aeenLpSJUzMM7kDV901sCVg=,iv:ywJaJYj2xrNkgQsWZJF51ZUAwBwMk14eQDe9EC6EXaQ=,tag:GQlHIofanq/yETLbAqS2Nw==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.10.2