diff --git a/machines/Lilim/hardware-configuration.nix b/machines/Lilim/hardware-configuration.nix
index dc2c66b..e3fe615 100644
--- a/machines/Lilim/hardware-configuration.nix
+++ b/machines/Lilim/hardware-configuration.nix
@@ -1,15 +1,16 @@
-{ pkgs, ... }:
+{ config, pkgs, ... }:
 
-{
-  imports = [ <nixpkgs/nixos/modules/installer/scan/not-detected.nix>
-            ];
+let
+  cfg = config.machine;
+in {
+  imports = [ <nixpkgs/nixos/modules/installer/scan/not-detected.nix> ];
 
   boot = {
     loader.systemd-boot = {
       enable = true;
       signed = true;
-      signing-key = "/secret/secureboot/db.key";
-      signing-certificate = "/secret/secureboot/db.crt";
+      signing-key = "${cfg.secretPath}/secureboot/db.key";
+      signing-certificate = "${cfg.secretPath}/secureboot/db.crt";
     };
     loader.efi.canTouchEfiVariables = true;
     cleanTmpDir = true;