diff --git a/ansible/roles/dnsmasq/files/dnsmasq.conf b/ansible/roles/dnsmasq/files/dnsmasq.conf
index e73564b..a43345d 100644
--- a/ansible/roles/dnsmasq/files/dnsmasq.conf
+++ b/ansible/roles/dnsmasq/files/dnsmasq.conf
@@ -40,8 +40,8 @@ server=/kun.is/192.168.30.7
 # Enable extended logging
 log-dhcp
 log-queries
-# Resolve dns.dmz to addresses on main NIC
-interface-name=hermes.dmz,ens4
+# Resolve hermes.dmz to addresses on main NIC
+interface-name=hermes.dmz,ens3
 # Non-conventional port because we also run nsd on this machine
 port=5353
 # Override addresses of name servers
diff --git a/terraform/dns/main.tf b/terraform/dns/main.tf
index 755e746..4df00ae 100644
--- a/terraform/dns/main.tf
+++ b/terraform/dns/main.tf
@@ -12,7 +12,7 @@ terraform {
 }
 
 data "external" "secrets" {
-  program = ["cat", pathexpand("~/.tfvars.json")]
+  program = ["cat", pathexpand("~/.config/home/powerdns-api-key.json")]
 }
 
 provider "powerdns" {