diff --git a/ops/nixos/tvl-sso/default.nix b/ops/nixos/tvl-sso/default.nix
index 9d1bae58a..8590918e5 100644
--- a/ops/nixos/tvl-sso/default.nix
+++ b/ops/nixos/tvl-sso/default.nix
@@ -14,6 +14,7 @@ in {
         User = "apereo-cas";
         Group = "apereo-cas";
         ExecStart = "${apereo-cas}/bin/cas";
+        EnvironmentFile = "/etc/cas/secrets";
         Restart = "always";
       };
     };