diff --git a/files/zfs-load-key.service b/files/zfs-load-key.service
new file mode 100644
index 0000000..28e4863
--- /dev/null
+++ b/files/zfs-load-key.service
@@ -0,0 +1,13 @@
+[Unit]
+Description=Load encryption keys
+DefaultDependencies=no
+After=zfs-import.target
+Before=zfs-mount.service
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/sbin/zfs load-key -a
+
+[Install]
+WantedBy=zfs-mount.service
diff --git a/setup-zfs-and-lxd.py b/setup-zfs-and-lxd.py
index 0e0404a..599f4a6 100644
--- a/setup-zfs-and-lxd.py
+++ b/setup-zfs-and-lxd.py
@@ -105,3 +105,9 @@ if not host.fact.command('zfs list | grep exports || true'):
         name='Create ZFS volume exports',
         commands=['zfs create local/exports -o mountpoint=/var/backups/lxd']
     )
+
+server.shell(
+    name='Mount local/exports',
+    commands=['zfs mount local/exports'],
+)
+