diff --git a/flake.nix b/flake.nix
index a5f8770..580691a 100644
--- a/flake.nix
+++ b/flake.nix
@@ -89,16 +89,10 @@
               description = "Embedding model name.";
             };
 
-            adminPasswordHashFile = lib.mkOption {
-              type = lib.types.nullOr lib.types.path;
-              default = null;
-              description = "Path to a file containing the bcrypt hash of the admin password.";
-            };
-
             adminPasswordHash = lib.mkOption {
               type = lib.types.nullOr lib.types.str;
               default = null;
-              description = "Bcrypt hash of the admin password directly. Prefer adminPasswordHashFile for secrets.";
+              description = "Bcrypt hash of the admin bootstrap password.";
             };
 
             sqlitePath = lib.mkOption {
@@ -139,9 +133,8 @@
                 StateDirectory = "st-pierre";
                 ExecStart = "${st-pierre-pkg}/bin/st-pierre";
               }
-              // lib.optionalAttrs (cfg.openaiApiKeyFile != null || cfg.adminPasswordHashFile != null || cfg.qdrantApiKeyFile != null) {
+              // lib.optionalAttrs (cfg.openaiApiKeyFile != null || cfg.qdrantApiKeyFile != null) {
                 EnvironmentFile = lib.optional (cfg.openaiApiKeyFile != null) cfg.openaiApiKeyFile
-                  ++ lib.optional (cfg.adminPasswordHashFile != null) cfg.adminPasswordHashFile
                   ++ lib.optional (cfg.qdrantApiKeyFile != null) cfg.qdrantApiKeyFile;
               };