diff --git a/flake.lock b/flake.lock
index 4b2d904..8751992 100644
--- a/flake.lock
+++ b/flake.lock
@@ -134,11 +134,11 @@
     },
     "nixpkgs-master": {
       "locked": {
-        "lastModified": 1779583734,
-        "narHash": "sha256-Q96rInBJ+Fj9uKWfESTZflRTaQAouNEN9yBLmYiXr+8=",
+        "lastModified": 1779582842,
+        "narHash": "sha256-aJYBdQXSD2gMlD39zP35E5qcPN91f3GWI5+9RHxiHsc=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "7187ab1fdea9daa9ed0267b791ac5837f123c5e2",
+        "rev": "89afca31a77b6850e7335d60e3d35cd742e772cb",
         "type": "github"
       },
       "original": {
diff --git a/flake.nix b/flake.nix
index 512ca5f..0e09394 100644
--- a/flake.nix
+++ b/flake.nix
@@ -33,6 +33,9 @@
 
         specialArgs = {
           inherit nixpkgs-unstable nixpkgs-master hosts simple-nixos-mailserver;
+
+          # Provide environment for secret key command
+          keyCommandEnv = [ "env" "GNUPGHOME=/home/fi/.passinfra_gnupg" "PASSWORD_STORE_DIR=/home/fi/pass/infra" ];
         };
       };
     } // builtins.mapAttrs (helper.generateColmenaHost) hosts;