diff --git a/nixos/modules/services/web-apps/bookstack.nix b/nixos/modules/services/web-apps/bookstack.nix
index 696f486cd90a..8c9a776c56f7 100644
--- a/nixos/modules/services/web-apps/bookstack.nix
+++ b/nixos/modules/services/web-apps/bookstack.nix
@@ -249,7 +249,7 @@ in {
           OIDC_NAME = "MyLogin";
           OIDC_DISPLAY_NAME_CLAIMS = "name";
           OIDC_CLIENT_ID = "bookstack";
-          OIDC_CLIENT_SECRET = {_secret = "/run/keys/oidc_secret"};
+          OIDC_CLIENT_SECRET = {_secret = "/run/keys/oidc_secret";};
           OIDC_ISSUER = "https://keycloak.example.com/auth/realms/My%20Realm";
           OIDC_ISSUER_DISCOVER = true;
         }