diff --git a/hosts/plover/modules/services/bind.nix b/hosts/plover/modules/services/bind.nix
index f3a4460e..6c855d95 100644
--- a/hosts/plover/modules/services/bind.nix
+++ b/hosts/plover/modules/services/bind.nix
@@ -190,13 +190,13 @@ in
         secretPath = path: config.sops.secrets."dns/${path}".path;
       in
       lib.mkAfter ''
-        {
+        [ -f '${domainZone'}' ] || {
           install -Dm0600 '${domainZone}' '${domainZone'}'
-          replace-secret #mailboxSecurityKey# '${secretPath "${domain}/mailbox-security-key"}' '${domainZone'}'
-          replace-secret #mailboxSecurityKeyRecord# '${secretPath "${domain}/mailbox-security-key-record"}' '${domainZone'}'
+          replace-secret '#mailboxSecurityKey#' '${secretPath "${domain}/mailbox-security-key"}' '${domainZone'}'
+          replace-secret '#mailboxSecurityKeyRecord#' '${secretPath "${domain}/mailbox-security-key-record"}' '${domainZone'}'
         }
 
-        {
+        [ -f '${fqdnZone'}' ] || {
           install -Dm0600 '${fqdnZone}' '${fqdnZone'}'
         }
       '';