diff --git a/nix/modules/systemd-vaultd.nix b/nix/modules/systemd-vaultd.nix
index 3d176d5..89e359c 100644
--- a/nix/modules/systemd-vaultd.nix
+++ b/nix/modules/systemd-vaultd.nix
@@ -20,6 +20,8 @@ in {
     description = "systemd-vaultd daemon";
     requires = ["systemd-vaultd.socket"];
     after = ["systemd-vaultd.socket"];
+    # Restarting can break services waiting for secrets
+    stopIfChanged = false;
     serviceConfig = {
       ExecStart = "${systemd-vaultd}/bin/systemd-vaultd";
     };