diff --git a/services/vault/default.nix b/services/vault/default.nix
index 9fe0934..cbbf45a 100644
--- a/services/vault/default.nix
+++ b/services/vault/default.nix
@@ -3,9 +3,9 @@
   services.openbao = {
     enable = true;
 
-    ui = true;
-
     settings = {
+      ui = true;
+
       storage.file.path = "/var/lib/openbao";
       listener.default = {
         type = "tcp";