diff --git a/lxc-apps/decidim/install.sh b/lxc-apps/decidim/install.sh
index 92e84c9..c29e84f 100755
--- a/lxc-apps/decidim/install.sh
+++ b/lxc-apps/decidim/install.sh
@@ -25,8 +25,10 @@ install -o 108080 -g 108080 -m 700 -d ${DECIDIM_CONF}/initializers
 install -o 108080 -g 108080 -m 700 -d ${DECIDIM_DATA}/migrate
 install -o 108080 -g 108080 -m 700 -d ${DECIDIM_DATA}/storage
 install -o 108080 -g 108080 -m 700 -d ${DECIDIM_DATA}/uploads
-export DECIDIM_SECRET=$(spoc-container exec -u 8080 -g 8080 decidim -- sh -c 'cd /srv/decidim-app; bin/rake secret')
 install -o 108080 -g 108080 -m 640 decidim_conf/initializers/decidim.rb ${DECIDIM_CONF}/initializers/decidim.rb
+# application.yml is installed twice because it needs to exist when the container is executed
+envsubst <decidim_conf/application.yml | install -o 108080 -g 108080 -m 640 /dev/stdin ${DECIDIM_CONF}/application.yml
+export DECIDIM_SECRET=$(spoc-container exec -u 8080 -g 8080 decidim -- sh -c 'cd /srv/decidim-app; bin/rake secret')
 envsubst <decidim_conf/application.yml | install -o 108080 -g 108080 -m 640 /dev/stdin ${DECIDIM_CONF}/application.yml
 
 # Populate database