diff --git a/start.sh b/start.sh
index ecef45c..d7c2808 100755
--- a/start.sh
+++ b/start.sh
@@ -2,6 +2,8 @@
 
 set -eu
 
+MAS_KEYS_DIR=${MAS_KEYS_DIR:-/app/data/configs/mas-keys}
+
 mkdir -p /app/data/data /app/data/configs /run/synapse
 mkdir -p "${MAS_KEYS_DIR}"
 
@@ -13,8 +15,6 @@ MAS_SECRET_FILE=/app/data/configs/mas-client-secret
 MAS_CONFIG_TEMPLATE=/app/pkg/mas/mas-config.template.yaml
 MAS_CONFIG_OUTPUT=/app/data/configs/mas.yaml
 MAS_CLI_BIN=/app/pkg/mas/mas-cli
-MAS_KEYS_DIR=${MAS_KEYS_DIR:-/app/data/configs/mas-keys}
-MAS_KEYS_DIR=/app/data/configs/mas-keys
 MAS_OIDC_CLIENT_ID=${MAS_OIDC_CLIENT_ID:-synapse}
 MAS_OIDC_ISSUER=${MAS_OIDC_ISSUER:-https://${MAS_DOMAIN}}
 MAS_OIDC_AUTH_ENDPOINT=${MAS_OIDC_AUTH_ENDPOINT:-${MAS_OIDC_ISSUER}/oauth2/authorize}