diff --git a/morph/issuer.nix b/morph/issuer.nix
index ddf01bdfc832a13aee357475ef639c539ea5bda3..57ffd009d58064830a30d30af926263962dcc5d7 100644
--- a/morph/issuer.nix
+++ b/morph/issuer.nix
@@ -1,5 +1,6 @@
 { hardware
 , ristrettoSigningKeyPath
+, stripeSecretKeyPath
 , issuerDomain
 , letsEncryptAdminEmail
 , stateVersion
@@ -27,6 +28,7 @@
     enable = true;
     # XXX This should be passed as a path.
     ristrettoSigningKey = builtins.readFile (./.. + ristrettoSigningKeyPath);
+    stripeSecretKeyPath = ./.. + stripeSecretKeyPath;
     database = "SQLite3";
     databasePath = "/var/db/vouchers.sqlite3";
     inherit letsEncryptAdminEmail;