diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index bfe69430cfc6f76552f62f262549ff4e3f6178b8..ef94ea03e64adb424a305c441a44379257d9490f 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -19,6 +19,16 @@ earlier changes.
 
 .. towncrier release notes start
 
+v10.0.1 (2025-07-31)
+--------------------
+
+Bugfixes
+~~~~~~~~
+
+- :ref:`configuration-options.yk8s.k8s-service-layer.vault.s3_config_file`
+  is not forced to be set anymore. (`!1972 <https://gitlab.com/yaook/k8s/-/merge_requests/1972>`_)
+
+
 v10.0.0 (2025-07-26)
 --------------------
 
diff --git a/nix/yk8s/k8s-supplements/vault.nix b/nix/yk8s/k8s-supplements/vault.nix
index 8ab44204c13bc615d34a5c0ed86046a812cb0fac..5d64c2355995c3af4a4444cbecc4145a973052f6 100644
--- a/nix/yk8s/k8s-supplements/vault.nix
+++ b/nix/yk8s/k8s-supplements/vault.nix
@@ -196,10 +196,6 @@ in {
       type = with types; nullOr relativePosixPath;
       default = null;
       example = "./vault/backup_s3_config.yaml";
-      apply = v:
-        if config.yk8s.k8s-service-layer.vault.enable_backups == true && v == null
-        then throw "[k8s-service-layer.vault.s3_config_file] must not be null when k8s-service-layer.vault.enable_backups == true"
-        else v;
     };
     service_type = mkOption {
       description = ''
diff --git a/version b/version
index a13e7b9c87e49f1dfb6e21b7aba96d80d1b6ed82..1532420512a92ec0a568d98960bdf48659a7ed17 100644
--- a/version
+++ b/version
@@ -1 +1 @@
-10.0.0
+10.0.1