diff --git a/nixos/modules/issuer.nix b/nixos/modules/issuer.nix
index 87009033ab4b41df6cb07173426483028f801131..6e8e0aea8212e0d94a1f59996510eadd9407471a 100644
--- a/nixos/modules/issuer.nix
+++ b/nixos/modules/issuer.nix
@@ -6,7 +6,7 @@ in {
   options = {
     services.private-storage-issuer.enable = lib.mkEnableOption "PrivateStorage ZKAP Issuer Service";
     services.private-storage-issuer.package = lib.mkOption {
-      default = ourpkgs.zkapissuer.components.exes."PaymentServer-exe";
+      default = ourpkgs.zkapissuer;
       type = lib.types.package;
       example = lib.literalExample "pkgs.zkapissuer.components.exes.\"PaymentServer-exe\"";
       description = ''
@@ -172,7 +172,7 @@ in {
             "--stripe-endpoint-scheme ${cfg.stripeEndpointScheme} " +
             "--stripe-endpoint-port ${toString cfg.stripeEndpointPort}";
         in
-          "${cfg.package}/bin/PaymentServer-exe ${originArgs} ${issuerArgs} ${databaseArgs} ${httpsArgs} ${stripeArgs}";
+          "${cfg.package.exePath} ${originArgs} ${issuerArgs} ${databaseArgs} ${httpsArgs} ${stripeArgs}";
     };
 
     # Certificate renewal.  A short-lived service meant to be repeatedly
diff --git a/nixos/pkgs/zkapissuer/default.nix b/nixos/pkgs/zkapissuer/default.nix
index 27f5fa3ddf67f44800ab927aee8c23943a57cc96..b4f90d3582cd686fbdf62a6267cb1070c05e9c57 100644
--- a/nixos/pkgs/zkapissuer/default.nix
+++ b/nixos/pkgs/zkapissuer/default.nix
@@ -1,5 +1,6 @@
 { callPackage }:
 let
   repo = callPackage ./repo.nix { };
+  PaymentServer = (import "${repo}/nix").PaymentServer;
 in
-  (import "${repo}/nix").PaymentServer
+  PaymentServer.components.exes."PaymentServer-exe"