diff --git a/ops/nixos/lib/vault-agent.nix b/ops/nixos/lib/vault-agent.nix
index 925fee316f..326c4ad913 100644
--- a/ops/nixos/lib/vault-agent.nix
+++ b/ops/nixos/lib/vault-agent.nix
@@ -89,10 +89,10 @@ in
       };
 
       mounts = lib.optional (config.my.vault.bindMountStateTo != null) {
-        unitConfig.RequiresMountsFor = "${config.my.vault.bindMountStateTo} /var/lib/private/vault-agent";
+        unitConfig.RequiresMountsFor = "${config.my.vault.bindMountStateTo} /var/lib";
         options = "bind";
         what = config.my.vault.bindMountStateTo;
-        where = "/var/lib/private/vault-agent";
+        where = "/var/lib/vault-agent";
         requiredBy = [ "vault-agent.service" ];
         before = [ "vault-agent.service" ];
         wantedBy = [ "vault-agent.service" ];