diff --git a/flake.nix b/flake.nix
index df348e5..a643360 100644
--- a/flake.nix
+++ b/flake.nix
@@ -156,12 +156,11 @@
                 pkgs.writeShellScript "unlock-${hostname}" ''
                   set -exo pipefail
                   # opening luks fails if gpg-agent is not unlocked yet
-                  pass "devices/${hostname}/luks" >/dev/null
-                  ssh \
+                  pass "devices/${hostname}/luks" | ssh \
                       ${lib.optionalString unlockOverV4 "-4"} \
                       -p 2222 \
                       "root@${targetHost}" \
-                      "cat > /crypt-ramfs/passphrase" < <(pass "devices/${hostname}/luks")
+                      "cat > /crypt-ramfs/passphrase"
                 '')
               self.nixosConfigurations);