diff --git a/hosts/marvin/services/library.nix b/hosts/marvin/services/library.nix
index 7d43a1e4..f92028fa 100644
--- a/hosts/marvin/services/library.nix
+++ b/hosts/marvin/services/library.nix
@@ -50,7 +50,7 @@ in
       displayName = "dishNet Library";
       homepageUrl = "https://${d.extUrl}";
       groups = [ "friends" ];
-      clientSecretFile = ./secrets/grimmory-oidc-secret.age;
+      clientSecretFile = ./secrets/grimmory/oidc-secret.age;
       redirectUrls = [ "https://${d.extUrl}/oauth2-callback" ];
       postLogoutUrl = "https://${d.extUrl}/api/v1/auth/oidc/backchannel-logout";
     }
diff --git a/hosts/marvin/services/secrets/grimmory-oidc-secret.age b/hosts/marvin/services/secrets/grimmory/oidc-secret.age
similarity index 100%
rename from hosts/marvin/services/secrets/grimmory-oidc-secret.age
rename to hosts/marvin/services/secrets/grimmory/oidc-secret.age
diff --git a/hosts/marvin/services/secrets/secrets.nix b/hosts/marvin/services/secrets/secrets.nix
index ad5d6d19..427971d9 100644
--- a/hosts/marvin/services/secrets/secrets.nix
+++ b/hosts/marvin/services/secrets/secrets.nix
@@ -27,7 +27,7 @@ in
   "anubis-key.age".publicKeys = marvinDefault;
   "bichon-encryption-password.age".publicKeys = pqKeys;
   "golink-authkey.age".publicKeys = marvinDefault;
-  "grimmory-oidc-secret.age".publicKeys = pqKeys;
+  "grimmory/oidc-secret.age".publicKeys = pqKeys;
   "jellyfin-exporter-secrets.age".publicKeys = pqKeys;
   "miniflux-admin.age".publicKeys = pqKeys;
   "pinchflat-secrets.age".publicKeys = pqKeys;