diff --git a/bundles/ldap-frontend/files/ldap-frontend.service b/bundles/ldap-frontend/files/ldap-frontend.service
index 14ccbbb..3b4dbef 100644
--- a/bundles/ldap-frontend/files/ldap-frontend.service
+++ b/bundles/ldap-frontend/files/ldap-frontend.service
@@ -1,5 +1,5 @@
 [Unit]
-Description=LDAP fronten
+Description=LDAP frontend
 After=network.target
 Requires=slapd.service
 
@@ -7,6 +7,7 @@ Requires=slapd.service
 User=www-data
 Group=www-data
 Environment=APP_CONFIG=/opt/ldap-frontend/config.json
+Environment=FLASK_SECRET_KEY=${repo.vault.password_for(f'{node.name} ldap-frontend secret key')}
 WorkingDirectory=/opt/ldap-frontend/src
 ExecStart=/opt/ldap-frontend/venv/bin/gunicorn --threads 4 --bind 127.0.0.1:23000 'ldap_frontend:app'
 
diff --git a/bundles/ldap-frontend/items.py b/bundles/ldap-frontend/items.py
index 8d458d6..e8c0a23 100644
--- a/bundles/ldap-frontend/items.py
+++ b/bundles/ldap-frontend/items.py
@@ -35,6 +35,7 @@ actions = {
 
 files = {
     '/etc/systemd/system/ldap-frontend.service': {
+        'content_type': 'mako',
         'triggers': {
             'action:systemd-reload',
             'svc_systemd:ldap-frontend:restart',