diff --git a/hosts/freun-dev/secrets.nix b/hosts/freun-dev/secrets.nix
index 1e3e2ef..1874cc4 100644
--- a/hosts/freun-dev/secrets.nix
+++ b/hosts/freun-dev/secrets.nix
@@ -17,7 +17,6 @@
           "vaultwarden"
           "donetick"
           "dnote"
-          "octodns"
           "mealie"
           "mosquitto/homie"
           "mosquitto/telegraf"
diff --git a/modules/services/octodns.nix b/modules/services/octodns.nix
index ae365f4..382c9d9 100644
--- a/modules/services/octodns.nix
+++ b/modules/services/octodns.nix
@@ -179,7 +179,7 @@ let
       };
       hetzner = {
         class = "octodns_hetzner.HetznerProvider";
-        token = "env/HETZNER_TOKEN";
+        token = "env/HETZNER_API_KEY";
       };
     };
 
@@ -214,7 +214,7 @@ in
         Type = "oneshot";
         ExecStart = "${octodns}/bin/octodns-sync --config-file ${configFile} --doit";
         DynamicUser = true;
-        EnvironmentFile = secrets.octodns.path;
+        EnvironmentFile = secrets.hetzner.path;
         RemainAfterExit = true;
       };
       wantedBy = lib.optionals config.services.nginx.enable [ "nginx.service" ];
diff --git a/secrets/hetzner.age b/secrets/hetzner.age
index abf0b52..e4167b8 100644
Binary files a/secrets/hetzner.age and b/secrets/hetzner.age differ