diff --git a/system/services/kopia.nix b/system/services/kopia.nix
index 4536e986..8b5873df 100644
--- a/system/services/kopia.nix
+++ b/system/services/kopia.nix
@@ -98,8 +98,8 @@ in {
         "--insecure"
         "--address=0.0.0.0:51515"
         # TODO: How to set this?
-        "--server-username=$KOPIA_SERVER_USERNAME"
-        "--server-password=$KOPIA_SERVER_PASSWORD"
+        "--server-username=(cat ${config.sops.secrets.kopia-server-username.path})"
+        "--server-password=(cat ${config.sops.secrets.kopia-server-password.path})"
       ];
 
       extraOptions = [