diff --git a/systemd/wrapper.sh b/systemd/wrapper.sh
index 3a5736308d5e8f5e98def443d3a35b8ed9691b0e..5d02e408b57b0f0a8a24210e58b4cb14992699c8 100755
--- a/systemd/wrapper.sh
+++ b/systemd/wrapper.sh
@@ -1,9 +1,15 @@
 #!/bin/sh
 
+XDG_CONFIG_HOME="${XDG_CONFIG_HOME:-$HOME/.config}"
+
 # Allow to load the secret from proper secrets store
 # in this key GNOME keyring
 if [ -z "$HCLOUD_TOKEN" ]; then
   export HCLOUD_TOKEN="$(secret-tool lookup com.shivering-isles.git.sheogorath.hcloud-dynfw/api.hetzner.cloud api-key)"
 fi
 
-exec hcloud-dynfw
+if command -v hcloud-dynfw >/dev/null 2>&1; then
+  exec hcloud-dynfw
+else
+  podman run --rm -it -e HCLOUD_TOKEN --env-file "$XDG_CONFIG_HOME/hcloud-dynfw/env" quay.io/sheogorath/hcloud-dynfw
+fi