diff --git a/cluster/services/locksmith/provider.nix b/cluster/services/locksmith/provider.nix
index 35efaeb..e6af83d 100644
--- a/cluster/services/locksmith/provider.nix
+++ b/cluster/services/locksmith/provider.nix
@@ -42,9 +42,11 @@ in
                 };
               };
             }));
+            default = {};
           };
         };
       }));
+      default = {};
     };
   };
 
diff --git a/cluster/services/locksmith/receiver.nix b/cluster/services/locksmith/receiver.nix
index 715bfcf..a4a407b 100644
--- a/cluster/services/locksmith/receiver.nix
+++ b/cluster/services/locksmith/receiver.nix
@@ -12,6 +12,7 @@ in
 {
   options.services.locksmith.waitForSecrets = lib.mkOption {
     type = with lib.types; attrsOf (listOf str);
+    default = {};
   };
 
   config = lib.mkMerge [