diff --git a/pkgs/clan-cli/clan_cli/secrets/sops.py b/pkgs/clan-cli/clan_cli/secrets/sops.py
index 80650ee4..bdd7161d 100644
--- a/pkgs/clan-cli/clan_cli/secrets/sops.py
+++ b/pkgs/clan-cli/clan_cli/secrets/sops.py
@@ -162,7 +162,10 @@ def encrypt_file(
 
 
 def decrypt_file(secret_path: Path) -> str:
-    cmd = nix_shell(["sops"], ["sops", "--decrypt", str(secret_path)])
+    with sops_manifest([]) as manifest:
+        cmd = nix_shell(
+            ["sops"], ["sops", "--config", str(manifest), "--decrypt", str(secret_path)]
+        )
     res = subprocess.run(cmd, check=True, stdout=subprocess.PIPE, text=True)
     return res.stdout