diff --git a/nix/master.nix b/nix/master.nix
index f3946d3..d984039 100644
--- a/nix/master.nix
+++ b/nix/master.nix
@@ -145,7 +145,7 @@ in
           [
             name = "upload-to-s3";
             environment = {
-              S3_TOKEN = "xxxxxxx";
+              S3_TOKEN = "%(secret:s3-token)";
               S3_BUCKET = "bucket";
             };
             command = [ "nix" "copy" "%result%" ];