diff --git a/modules/system/services/wlan.nix b/modules/system/services/wlan.nix
index 60130ca..0936653 100644
--- a/modules/system/services/wlan.nix
+++ b/modules/system/services/wlan.nix
@@ -35,9 +35,9 @@ in
         restartUnits = [ "iwd.service" ];
       });
 
-    systemd.services.iwd.preStart = ''
-      rm --force /var/lib/iwd/*.{psk,8021x}
-      install -m 600 /run/secrets/iwd/* /var/lib/iwd
-    '';
+    systemd.services.iwd = {
+      preStart = "install -m 600 /run/secrets/iwd/* /var/lib/iwd";
+      postStop = "rm --force /var/lib/iwd/*.{psk,8021x}";
+    };
   };
 }