diff --git a/plugin.sh b/plugin.sh
index c81d6d9..3590d11 100755
--- a/plugin.sh
+++ b/plugin.sh
@@ -21,10 +21,11 @@ generate_secrets() {
   export DOCKER_HOST="ssh://$PLUGIN_USER@$PLUGIN_HOST:$PLUGIN_PORT"
 
   for SECRET in $(yq r "$PLUGIN_COMPOSE" 'secrets.*.name'); do 
-    eval "docker secret rm \"$SECRET\" - || true";
-    eval "echo \"generating $SECRET\""
-    PW=$(</dev/urandom tr -dc 'A-Za-z0-9' | head -c 40; echo)
-    eval "echo \"$PW\" | docker secret create \"$SECRET\" -";
+    if ! docker secret ls | grep $SECRET; then
+      eval "echo \"generating $SECRET\""
+      PW=$(</dev/urandom tr -dc 'A-Za-z0-9' | head -c 40; echo)
+      eval "echo \"$PW\" | docker secret create \"$SECRET\" -";
+    fi
   done
   echo "--- end secrets ---"
 }