--- a/modules/nixos/secrets.nix
+++ b/modules/nixos/secrets.nix
@@ -100,6 +100,7 @@
       "mode"
       "group"
       "owner"
+      "expectedGenerationData"
     ]));
   secretsFile = pkgs.writeTextFile {
     name = "secrets.json";
--- a/modules/secrets.nix
+++ b/modules/secrets.nix
@@ -63,7 +63,7 @@
   config = {
     hosts =
       mapAttrs (_: secretMap: {
-        nixos.secrets = mapAttrs (_: s: removeAttrs s ["createdAt" "expiresAt"]) secretMap;
+        nixos.secrets = mapAttrs (_: s: removeAttrs s ["createdAt" "expiresAt" "generationData"]) secretMap;
       })
       config.data.hostSecrets;
     nixpkgs.overlays = [