diff --git a/clanServices/k3s/default.nix b/clanServices/k3s/default.nix
index e796f1a..91eefe5 100644
--- a/clanServices/k3s/default.nix
+++ b/clanServices/k3s/default.nix
@@ -42,7 +42,7 @@ in
                 secret = false;
               };
               token = {
-                deploy = false;
+                deploy = true;
                 secret = true;
               };
             };
@@ -70,7 +70,7 @@ in
         services.k3s = {
           enable = true;
           role = "server";
-          token = config.clan.core.vars.generators.k3s.files.token.value;
+          tokenFile = config.clan.core.vars.generators.k3s.files.token.path;
           clusterInit = true;
         };
       };
@@ -97,8 +97,8 @@ in
           ipAddress = if pathExists ipAddressPath then readFile ipAddressPath else null;
 
           # Read the controller's token
-          tokenPath = "${config.clan.core.settings.directory}/vars/per-machine/${controller}/k3s/token";
-          token = if pathExists tokenPath then readFile tokenPath else null;
+          # tokenPath = "${config.clan.core.settings.directory}/vars/per-machine/${controller}/k3s/token";
+          # token = if pathExists tokenPath then readFile tokenPath else null;
         in
         {
           networking.firewall = {
@@ -117,7 +117,7 @@ in
             k3s = {
               enable = true;
               role = "agent";
-              token = token;
+              tokenFile = config.clan.core.vars.generators.k3s.files.token.path;
               serverAddr = "https://${ipAddress}:6443";
             };
           };