diff --git a/2-nomad-config/main.tf b/2-nomad-config/main.tf
index 7497f50..48ecbcd 100644
--- a/2-nomad-config/main.tf
+++ b/2-nomad-config/main.tf
@@ -25,7 +25,7 @@ provider "nomad" {
 }
 
 data "sops_file" "secrets" {
-  source_file = "secrets.enc.json"
+  source_file = "secrets/secrets.enc.json"
 }
 
 provider "cloudflare" {
diff --git a/2-nomad-config/readme.md b/2-nomad-config/readme.md
index 5ce3cba..5600adc 100644
--- a/2-nomad-config/readme.md
+++ b/2-nomad-config/readme.md
@@ -15,7 +15,7 @@ Put the age keys in /home/<user>/.config/sops/age/keys.txt
 
 ## Adding Secrets
 
-Edit the secrets using `sops secrets.enc.json`
+Edit the secrets using `sops secrets/secrets.enc.json`
 
 # Bootstrapping (starting without PostgreSQL running)
 
diff --git a/2-nomad-config/age-install.sh b/2-nomad-config/secrets/age-install.sh
similarity index 100%
rename from 2-nomad-config/age-install.sh
rename to 2-nomad-config/secrets/age-install.sh
diff --git a/2-nomad-config/secrets.enc.json b/2-nomad-config/secrets/secrets.enc.json
similarity index 100%
rename from 2-nomad-config/secrets.enc.json
rename to 2-nomad-config/secrets/secrets.enc.json
diff --git a/2-nomad-config/sops-install.sh b/2-nomad-config/secrets/sops-install.sh
similarity index 100%
rename from 2-nomad-config/sops-install.sh
rename to 2-nomad-config/secrets/sops-install.sh