diff --git a/cmd/genjwks/main.go b/cmd/genjwks/main.go
index cfa9c083..9ece76c4 100644
--- a/cmd/genjwks/main.go
+++ b/cmd/genjwks/main.go
@@ -8,7 +8,6 @@ import (
 	"crypto/rand"
 	"encoding/json"
 	"fmt"
-	"os"
 	"time"
 
 	"github.com/lestrrat-go/jwx/v2/jwk"
@@ -36,7 +35,5 @@ func main() {
 		panic(err)
 	}
 
-	if err := os.WriteFile("./jwks.json", b, 0644); err != nil {
-		panic(err)
-	}
+	fmt.Println(string(b))
 }
diff --git a/flake.nix b/flake.nix
index 1a307c44..c5b7c080 100644
--- a/flake.nix
+++ b/flake.nix
@@ -123,6 +123,7 @@
       };
       repoguard = buildCmdPackage "repoguard";
       keyfetch = buildCmdPackage "keyfetch";
+      genjwks = buildCmdPackage "genjwks";
     };
     packages = forAllSystems (system: {
       inherit
@@ -133,6 +134,7 @@
         knotserver-unwrapped
         repoguard
         keyfetch
+        genjwks
         ;
     });
     defaultPackage = forAllSystems (system: nixpkgsFor.${system}.appview);
@@ -162,6 +164,7 @@
           cp -f ${inter-fonts-src}/web/InterVariable*.woff2 appview/pages/static/fonts/
           cp -f ${inter-fonts-src}/web/InterDisplay*.woff2 appview/pages/static/fonts/
           cp -f ${ibm-plex-mono-src}/fonts/complete/woff2/IBMPlexMono-Regular.woff2 appview/pages/static/fonts/
+          export TANGLED_OAUTH_JWKS="$(${pkgs.genjwks}/bin/genjwks)"
         '';
         env.CGO_ENABLED = 1;
       };