diff --git a/build01/buildkite.nix b/build01/buildkite.nix
index 05e37aa..b3205e9 100644
--- a/build01/buildkite.nix
+++ b/build01/buildkite.nix
@@ -5,7 +5,7 @@
     enable = true;
     tokenPath = "/run/keys/buildkite-token";
     openssh.privateKeyPath = builtins.toPath "/run/keys/buildkite-agent-key";
-    openssh.publicKeyPath = builtins.toPath "/run/keys/buildkite-agent-key-pub";
+    openssh.publicKeyPath = builtins.toPath "/run/keys/buildkite-agent-key.pub";
 
     runtimePackages = [
       pkgs.gnutar
diff --git a/deployment.nix b/deployment.nix
index f50a83c..1e81fe5 100644
--- a/deployment.nix
+++ b/deployment.nix
@@ -27,8 +27,8 @@ in {
         permissions = "0600";
       };
 
-      deployment.keys.buildkite-agent-key-pub = {
-        text = secrets.buildkite-agent-key-pub;
+      deployment.keys."buildkite-agent-key.pub" = {
+        text = secrets."buildkite-agent-key.pub";
         user = "buildkite-agent";
         permissions = "0600";
       };
diff --git a/secrets/default.nix b/secrets/default.nix
index 8ffdcec..f60a4f6 100644
Binary files a/secrets/default.nix and b/secrets/default.nix differ