diff --git a/flake.nix b/flake.nix
index 0d208479..28af8066 100644
--- a/flake.nix
+++ b/flake.nix
@@ -33,6 +33,7 @@
             in pkgs.writeScriptBin "${name}-nixos-rebuild" ''
               #!${pkgs.runtimeShell}
               set -ev
+              nix-copy-closure --to ${target} ${secrets}
               nix-copy-closure --to ${target} ${self}
               exec ssh -t ${target} nixos-rebuild --flake ${self}#${name} $@
             '';