diff --git a/tools/create-vpn-keys.sh b/tools/create-vpn-keys.sh
index f07fbebe042bb94a47f62f872a25ec4b5ea8295d..6c8cf388f7a3368aa12e072d46d4de50f6039b36 100755
--- a/tools/create-vpn-keys.sh
+++ b/tools/create-vpn-keys.sh
@@ -26,6 +26,8 @@ CONFIG=$(nix-instantiate --strict --json --eval "${SRC}"/get-vpn-config.nix --ar
 MONITORING_IPS=$(echo $CONFIG | jp --unquoted "join(' ', clientIPs)")
 VPNSERVER_IP=$(echo $CONFIG | jp --unquoted "serverIP")
 
+mkdir -p "${VPN_SECRETS}"
+
 for i in $MONITORING_IPS $VPNSERVER_IP; do
   wg genkey | tee "${VPN_SECRETS}"/${i}.key | wg pubkey > "${VPN_SECRETS}"/${i}.pub
 done