diff --git a/services/vault/default.nix b/services/vault/default.nix
index cbbf45a..cc669e0 100644
--- a/services/vault/default.nix
+++ b/services/vault/default.nix
@@ -11,6 +11,10 @@
         type = "tcp";
         address = "0.0.0.0:8200";
       };
+      listener.socket = {
+        type = "unix";
+        address = "/run/openbao.sock";
+      };
     };
   };
 }