diff --git a/cluster/services/locksmith/provider.nix b/cluster/services/locksmith/provider.nix
index 9c492a1..35efaeb 100644
--- a/cluster/services/locksmith/provider.nix
+++ b/cluster/services/locksmith/provider.nix
@@ -26,7 +26,7 @@ in
                   default = [];
                 };
                 command = mkOption {
-                  type = types.coercedTo types.str (package: "${package}") types.package;
+                  type = types.coercedTo types.package (package: "${package}") types.str;
                 };
                 owner = mkOption {
                   type = types.str;