diff --git a/internal/tls/libvirt.go b/internal/tls/libvirt.go
index cbcac1e..227dd6f 100644
--- a/internal/tls/libvirt.go
+++ b/internal/tls/libvirt.go
@@ -253,7 +253,7 @@
 		m.writeFile("/etc/pki/libvirt/servercert.pem", secret.Data["tls.crt"])
 		m.writeFile("/etc/pki/libvirt/private/serverkey.pem", secret.Data["tls.key"])
 		m.writeFile("/etc/pki/libvirt/clientcert.pem", secret.Data["tls.crt"])
-		m.writeFile("/etc/pki/libvirt/private/clientkey.pem", secret.Data["ca.key"])
+		m.writeFile("/etc/pki/libvirt/private/clientkey.pem", secret.Data["tls.key"])
 		m.createDirectory("/etc/pki/qemu")
 		m.writeFile("/etc/pki/qemu/ca-cert.pem", secret.Data["ca.crt"])
 		m.writeFile("/etc/pki/qemu/server-cert.pem", secret.Data["tls.crt"])
diff --git a/roles/defaults/vars/main.yml b/roles/defaults/vars/main.yml
index 63368dd..5f72712 100644
--- a/roles/defaults/vars/main.yml
+++ b/roles/defaults/vars/main.yml
@@ -95,7 +95,7 @@
   kube_state_metrics: registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.9.2@sha256:c30cae7072ffb03f3e7934516db89b3be6c9e5521c0d04d5bbc6e115c9bfa3a7
   kubectl: docker.io/bitnami/kubectl:1.27.3@sha256:876cebc2d9272d9eb42c2128c9a08c7e7715dbfe4f2eb2f0b3612df977fdd6b7
   libvirt: ghcr.io/vexxhost/atmosphere/libvirtd:zed@sha256:2f62e9ba8b229adfa47867feb396f697e71ec97686c1d6e0214ef2efdba0a02c
-  libvirt_tls_sidecar: ghcr.io/vexxhost/atmosphere/libvirt-tls-sidecar:latest@sha256:8b3567c9b7f4c942abf12971bc69c0f4b382955b27139c98247891228f825ae7
+  libvirt_tls_sidecar: ghcr.io/vexxhost/atmosphere/libvirt-tls-sidecar:latest@sha256:bb0954a9fd47f1e2c783a22dbe81c24bbe88f3658b2848b62ad0601f7323d7d1
   libvirt_exporter: docker.io/vexxhost/libvirtd-exporter:latest@sha256:1a0fdf89f80060bfdbb8cf45213295c5d9fb1f7ea7dbfe2b331f0649cc98df8e
   local_path_provisioner_helper: docker.io/library/busybox:1.36.0@sha256:086417a48026173aaadca4ce43a1e4b385e8e62cc738ba79fc6637049674cac0
   local_path_provisioner: docker.io/rancher/local-path-provisioner:v0.0.24@sha256:b7dea5221f06f6feed7788db0ad6b024a433c8f55533bd6cc792dc2079ff9ad2
diff --git a/shell.nix b/shell.nix
index 9b81adb..b3fe12c 100644
--- a/shell.nix
+++ b/shell.nix
@@ -2,6 +2,7 @@
 
 pkgs.mkShell {
   packages = with pkgs; [
+    pkgs.go
     pkgs.earthly
     pkgs.poetry
   ];