diff --git a/nsd.nix b/nsd.nix
index 0cbc76a..0d8e779 100644
--- a/nsd.nix
+++ b/nsd.nix
@@ -1023,7 +1023,7 @@ in {
           '';
         };
 
-        services.nsd-dnssec = mkIf dnssec {
+        nsd-dnssec = mkIf dnssec {
           description = "DNSSEC key rollover";
 
           wantedBy = [ "nsd.service" ];