diff --git a/lib/fudo/secrets.nix b/lib/fudo/secrets.nix
index 83172b9..4fec596 100644
--- a/lib/fudo/secrets.nix
+++ b/lib/fudo/secrets.nix
@@ -44,6 +44,7 @@ let
       requires = [ "local-fs.target" ];
       before = [ cfg.secret-target ];
       after = [ "local-fs.target" ];
+      restartIfChanged = true;
       serviceConfig = {
         Type = "oneshot";
         RemainAfterExit = true;