diff --git a/hosts/lazyworkhorse/configuration.nix b/hosts/lazyworkhorse/configuration.nix
index c714c77..8a51fd3 100644
--- a/hosts/lazyworkhorse/configuration.nix
+++ b/hosts/lazyworkhorse/configuration.nix
@@ -483,7 +483,7 @@
   };
 
   # Audit logging
-  services.auditd.enable = true;
+  security.auditd.enable = true;
   
   # Fail2ban log directory
   systemd.tmpfiles.rules = [