diff --git a/lib/fudo/auth/kerberos/kdc.nix b/lib/fudo/auth/kerberos/kdc.nix
index 9b95cb9..12c00da 100644
--- a/lib/fudo/auth/kerberos/kdc.nix
+++ b/lib/fudo/auth/kerberos/kdc.nix
@@ -326,6 +326,8 @@ let
                   bindClause = "--addresses=${concatStringsSep "," ips}";
                 in "${pkgs.heimdal}/libexec/heimdal/kdc --config-file=${kdcConf} --ports=88 ${bindClause}";
               };
+              unitConfig.ConditionPathExists =
+                [ cfg.kdc.database cfg.kdc.secondary.keytabs.hpropd ];
             };
 
             "heimdal-hpropd@" = {