diff --git a/infrastructure.org b/infrastructure.org
index 72ba5b9..a2c7751 100644
--- a/infrastructure.org
+++ b/infrastructure.org
@@ -233,9 +233,9 @@ in every router block.
 
 #+NAME: crowdsec_key
 #+BEGIN_SRC sh :results raw :exports none
-echo "Xvx3UTjAdThkqtNuVhciWzEOJuBZoWH58KE+E7C3L6I"
+printf "%s" "Xvx3UTjAdThkqtNuVhciWzEOJuBZoWH58KE+E7C3L6I"
 #+END_SRC
-#+BEGIN_SRC yaml :tangle /docker/appdata/traefik/dynamic.yaml
+#+BEGIN_SRC yaml :tangle /docker/appdata/traefik/dynamic.yaml :noweb yes
 http:
   middlewares:
 
@@ -1540,7 +1540,7 @@ http:
 Tangled to /docker/compose/.env. The CROWDSEC_LAPI_KEY is a noweb reference
 to the shared crowdsec_key block, so it stays in sync with dynamic.yaml.
 
-#+BEGIN_SRC dotenv :tangle /docker/compose/.env
+#+BEGIN_SRC dotenv :tangle /docker/compose/.env :noweb yes
 ## Auto-generated from infrastructure.org -- do not edit directly.
 ## Edit infrastructure.org and tangle to update.