diff --git a/modules/grist.nix b/modules/grist.nix
index 59340ea..faef203 100644
--- a/modules/grist.nix
+++ b/modules/grist.nix
@@ -42,7 +42,7 @@ with lib;
             # Forces Grist to only use a single team called 'Example'
             # GRIST_SINGLE_ORG: my-grist-team   # alternatively, GRIST_ORG_IN_PATH: "true" for multi-team operation
             # Force users to login (disable anonymous access)
-            GRIST_FORCE_LOGIN = true;
+            GRIST_FORCE_LOGIN = "true";
             # Base URL Grist redirects to when navigating. Change this to your domain.
             GRIST_OIDC_SP_HOST = "https://${dn}";
             APP_HOME_URL = "https://${dn}";