diff --git a/website/content/api-docs/task-api.mdx b/website/content/api-docs/task-api.mdx
index d7db63f9942..1600b79993d 100644
--- a/website/content/api-docs/task-api.mdx
+++ b/website/content/api-docs/task-api.mdx
@@ -12,7 +12,7 @@ Nomad's Task API provides every task managed by Nomad with a Unix Domain Socket
 the Task API does *not* require [mTLS][], but *always* requires authentication.
 See below for details.
 
-The Unix Domain Socket is located at `${SECRETS_DIR}/api.sock`.
+The Unix Domain Socket is located at `${NOMAD_SECRETS_DIR}/api.sock`.
 
 ## Rationale
 
diff --git a/website/content/docs/concepts/workload-identity.mdx b/website/content/docs/concepts/workload-identity.mdx
index 4fcbb0c5213..87725ac5f40 100644
--- a/website/content/docs/concepts/workload-identity.mdx
+++ b/website/content/docs/concepts/workload-identity.mdx
@@ -36,7 +36,7 @@ task "example" {
     # Expose Workload Identity in NOMAD_TOKEN env var
     env = true
 
-    # Expose Workload Identity in ${SECRETS_DIR}/nomad_token file
+    # Expose Workload Identity in ${NOMAD_SECRETS_DIR}/nomad_token file
     file = true
   }