diff --git a/nixos-modules/services/tailscale-openvpn.nix b/nixos-modules/services/tailscale-openvpn.nix
index 2273214a..91175f8c 100644
--- a/nixos-modules/services/tailscale-openvpn.nix
+++ b/nixos-modules/services/tailscale-openvpn.nix
@@ -61,9 +61,10 @@ with lib;
                   enable = true;
                   useRoutingFeatures = "server";
                   extraUpFlags = [ "--advertise-exit-node" ];
-                  authKeyFile = cfg.tsAuthKey;
+                  authKeyFile = "/host${cfg.tsAuthKey}";
                   openFirewall = true;
                 };
+                system.stateVersion = "23.11";
               };
 
             })
diff --git a/secrets/ovpnDe.age b/secrets/ovpnDe.age
index a415d33f..13026ed4 100644
Binary files a/secrets/ovpnDe.age and b/secrets/ovpnDe.age differ
diff --git a/secrets/ovpnNl.age b/secrets/ovpnNl.age
index 60d6bd5a..d3b1b8a2 100644
Binary files a/secrets/ovpnNl.age and b/secrets/ovpnNl.age differ
diff --git a/secrets/ovpnTu.age b/secrets/ovpnTu.age
index c91b67e8..748ef5a5 100644
Binary files a/secrets/ovpnTu.age and b/secrets/ovpnTu.age differ