diff --git a/hosts/skipper/security.nix b/hosts/skipper/security.nix
index 83aff72..b9f974b 100644
--- a/hosts/skipper/security.nix
+++ b/hosts/skipper/security.nix
@@ -8,8 +8,10 @@
       };
       u2f = {
         enable = true;
-        authFile = "/persist/secrets/u2f/u2f_keys";
-        cue = true;
+        settings = {
+          authFile = "/persist/secrets/u2f/u2f_keys";
+          cue = true;
+        };
       };
     };
     pki.certificateFiles = [ ../shared/certs/local.adtya.xyz.CA.pem ];