diff --git a/hosts/hetzner-arm/containers/vault-ca/default.nix b/hosts/hetzner-arm/containers/vault-ca/default.nix
index 9a56240..4400c1a 100644
--- a/hosts/hetzner-arm/containers/vault-ca/default.nix
+++ b/hosts/hetzner-arm/containers/vault-ca/default.nix
@@ -16,7 +16,7 @@ in {
     privateNetwork = true;
     hostAddress = hostIP;
     localAddress = containerIP;
-    additionalCapabilities = [ "CAP_IPC_LOCK" ];
+    additionalCapabilities = ["CAP_IPC_LOCK"];
 
     specialArgs = {
       inherit inputs;
diff --git a/hosts/hetzner-arm/containers/vault-ca/profiles/vault.nix b/hosts/hetzner-arm/containers/vault-ca/profiles/vault.nix
index 9907dd5..f20c5f4 100644
--- a/hosts/hetzner-arm/containers/vault-ca/profiles/vault.nix
+++ b/hosts/hetzner-arm/containers/vault-ca/profiles/vault.nix
@@ -1,4 +1,5 @@
 {pkgs, ...}: {
+  environment.systemPackages = with pkgs; [vault-bin];
   services.vault = {
     enable = true;
     package = pkgs.vault-bin;