diff --git a/services/vault/default.nix b/services/vault/default.nix
index 973d221..3055af2 100644
--- a/services/vault/default.nix
+++ b/services/vault/default.nix
@@ -10,8 +10,8 @@
       listener.default = {
         type = "tcp";
         address = "0.0.0.0:8200";
-        tls_cert_file = "/var/openbao/cert.pem";
-        tls_key_file = "/var/openbao/key.pem";
+        tls_cert_file = "/var/lib/openbao/cert.pem";
+        tls_key_file = "/var/lib/openbao/key.pem";
       };
       listener.socket = {
         type = "unix";