diff --git a/modules/k3s/default.nix b/modules/k3s/default.nix
index 063103a..193217e 100644
--- a/modules/k3s/default.nix
+++ b/modules/k3s/default.nix
@@ -15,6 +15,9 @@ in
   };
 
   config = mkIf cfg.enable {
+    imports = [
+      ./secrets.nix
+    ]
     networking.firewall.allowedTCPPorts = [
       6443 # k3s, api server
       2379 # k3s, etcd clients
diff --git a/modules/k3s/deployments/authentik.nix b/modules/k3s/deployments/authentik.nix
index bcd056b..69257c6 100644
--- a/modules/k3s/deployments/authentik.nix
+++ b/modules/k3s/deployments/authentik.nix
@@ -124,7 +124,7 @@ in
                 ];
               }
               {
-                name = "authentik-server";
+                name = "authentik-worker";
                 image = "ghcr.io/goauthentik/server:${authentik-version}";
                 args = [ "worker" ];
                 env = [