diff --git a/Makefile b/Makefile
index f5ad6c7..bda63dd 100644
--- a/Makefile
+++ b/Makefile
@@ -15,7 +15,7 @@ IMG   ?= ubuntu-24.04
 USER  ?= admin
 
 # Decrypt Hetzner token at runtime (requires SOPS_AGE_KEY or keys.txt locally)
-HCLOUD_TOKEN := $(shell sops -d --extract '["ops"]["hcloud_token"]' inventory/group_vars/secrets.sops.yaml 2>/dev/null)
+HCLOUD_TOKEN := $(shell sops -d --extract '["hetzner"]["token"]' secrets/hetzner-token.sops.yaml 2>/dev/null)
 
 # ---- Help ----
 help: ## Show this help