diff --git a/modules/homelab/mediastack/navidrome/default.nix b/modules/homelab/mediastack/navidrome/default.nix
index d9977aa..8857b2c 100644
--- a/modules/homelab/mediastack/navidrome/default.nix
+++ b/modules/homelab/mediastack/navidrome/default.nix
@@ -77,7 +77,7 @@ in {
           #Folder = lib.mkForce "${cfg.data_dir}/plugins";
         };
       };
-      environment = {
+      environmentFile = {
         ND_PLUGINS_FOLDER = "${cfg.data_dir}/plugins";
       };
     };
@@ -85,6 +85,7 @@ in {
     # override umask to make permissions work out
     systemd.services.${service}.serviceConfig = {
       UMask = lib.mkForce "0007";
+      EnvironmentFile = "${cfg.data_dir}/navidrome.env";
     };
 
     # add to caddy for reverse proxy