diff --git a/machines/vault01/k-radius/module.nix b/machines/vault01/k-radius/module.nix
index 70173c1..060f142 100644
--- a/machines/vault01/k-radius/module.nix
+++ b/machines/vault01/k-radius/module.nix
@@ -106,8 +106,10 @@ in
       wants = [ "network.target" ];
 
       preStart = ''
-        cp -R ${cfg.freeradius}/etc/raddb/* ${cfg.configDir}
-        cp -R ${rlm_python}/etc/raddb/* ${cfg.configDir}
+        mkdir -p ${cfg.configDir}
+
+        cp -R --no-preserve=mode ${cfg.freeradius}/etc/raddb/* ${cfg.configDir}
+        cp -R --no-preserve=mode ${rlm_python}/etc/raddb/* ${cfg.configDir}
 
         chmod -R u+w ${cfg.configDir}