diff --git a/package/czechlight-cfg-fs/netopeer2-keystored-persistent-keys.service b/package/czechlight-cfg-fs/netopeer2-keystored-persistent-keys.service
new file mode 100644
index 0000000..177c247
--- /dev/null
+++ b/package/czechlight-cfg-fs/netopeer2-keystored-persistent-keys.service
@@ -0,0 +1,14 @@
+[Unit]
+Description=Store SSH host keys into /cfg
+After=netopeer2-keystored-init-keys.service
+Requires=netopeer2-keystored-init-keys.service
+ConditionPathExists=!/cfg/etc/keystored/keys
+
+[Service]
+Type=oneshot
+ExecStartPre=/bin/mkdir -p /cfg/etc/ssh
+ExecStart=/bin/sh -c 'cp -a /etc/ssh/ssh_host_*_key* /cfg/etc/ssh/'
+ExecStart=/bin/cp -a /etc/keystored /cfg/etc/
+
+[Install]
+WantedBy=multi-user.target