diff --git a/modules/secrets/generate-secrets.nix b/modules/secrets/generate-secrets.nix
index fa72110..493c8ff 100644
--- a/modules/secrets/generate-secrets.nix
+++ b/modules/secrets/generate-secrets.nix
@@ -12,9 +12,9 @@ with lib;
     requiredBy = [ "setup-secrets.service" ];
     before = [ "setup-secrets.service" ];
     serviceConfig = {
-       Type = "oneshot";
-       RemainAfterExit = true;
-    } // config.nix-bitcoin-services.defaultHardening;
+      Type = "oneshot";
+      RemainAfterExit = true;
+    };
     script = ''
       mkdir -p "${config.nix-bitcoin.secretsDir}"
       cd "${config.nix-bitcoin.secretsDir}"
diff --git a/modules/secrets/secrets.nix b/modules/secrets/secrets.nix
index 163346d..0149289 100644
--- a/modules/secrets/secrets.nix
+++ b/modules/secrets/secrets.nix
@@ -56,7 +56,7 @@ in
       serviceConfig = {
          Type = "oneshot";
          RemainAfterExit = true;
-      } // config.nix-bitcoin-services.defaultHardening;
+      };
       script = ''
         setupSecret() {
             file="$1"