diff --git a/flake.nix b/flake.nix
index 3498a90..f2a3947 100644
--- a/flake.nix
+++ b/flake.nix
@@ -207,7 +207,7 @@
                   package
                 ];
 
-                environment.etc."restic/password" = lib.mkIf cfg.password != null {
+                environment.etc."restic/password" = lib.mkIf (cfg.password != null) {
                   text = cfg.password;
                   user = "root";
                   group = "root";