diff --git a/services/kanidm/default.nix b/services/kanidm/default.nix
index e5cb514..8d15bd5 100644
--- a/services/kanidm/default.nix
+++ b/services/kanidm/default.nix
@@ -48,6 +48,7 @@
   vault.secrets.kanidm-idm-admin = {
     secretPath = "kanidm/idm-admin-password";
     extractKey = "password";
+    services = [ "kanidm" ];
   };
 
   # Monitoring scrape target