diff --git a/machines/newton/services.nix b/machines/newton/services.nix
index f752bf2..090d061 100644
--- a/machines/newton/services.nix
+++ b/machines/newton/services.nix
@@ -76,7 +76,7 @@ in
     paperless = {
       enable = true;
       passwordFile = secrets."paperless/password".path;
-      extraConfig.PAPERLESS_ADMIN_USER = "felix";
+      settings.PAPERLESS_ADMIN_USER = "felix";
       mediaDir = "/data/docs";
     };
     # RSS aggregator and reader
diff --git a/modules/services/paperless/default.nix b/modules/services/paperless/default.nix
index 8aafbb8..ab304f6 100644
--- a/modules/services/paperless/default.nix
+++ b/modules/services/paperless/default.nix
@@ -27,7 +27,7 @@ in
       example = "/run/secrets/freshrss";
     };
 
-    extraConfig = mkOption {
+    settings = mkOption {
       type = types.attrs;
       default = { };
       description = "additional extraConfig";
@@ -38,9 +38,9 @@ in
     services.paperless = {
       enable = true;
       inherit (cfg) port mediaDir passwordFile;
-      extraConfig = {
+      settings = {
         PAPERLESS_OCR_LANGUAGE = "deu+eng";
-      } // cfg.extraConfig;
+      } // cfg.settings;
     };
 
     # monitoring is not really useful, because it only contains the http-worker infos -> skipped for now