diff --git a/nix/pkgs/pomerium.nix b/nix/pkgs/pomerium.nix
index fd78c3409e..d4e303eb52 100644
--- a/nix/pkgs/pomerium.nix
+++ b/nix/pkgs/pomerium.nix
@@ -52,8 +52,11 @@ buildGoModule rec {
   '';
 
   installPhase = ''
-    mkdir -p $out/bin
-    cat $GOPATH/bin/pomerium $NIX_BUILD_TOP/envoy/envoy.zip >$out/bin/pomerium
+    install -Dm0755 $GOPATH/bin/pomerium $out/bin/pomerium
+  '';
+  postFixup = ''
+    cat $out/bin/pomerium $NIX_BUILD_TOP/envoy/envoy.zip >$out/bin/pomerium.new
+    mv $out/bin/pomerium.new $out/bin/pomerium
     chmod +x $out/bin/pomerium
     zip --adjust-sfx $out/bin/pomerium
   '';