diff --git a/deployment/data-model.nix b/deployment/data-model.nix
index f5f63f2f..75c759b9 100644
--- a/deployment/data-model.nix
+++ b/deployment/data-model.nix
@@ -119,9 +119,7 @@ in
               # TODO: maybe transpose, and group the resources by type instead
               type = attrsOf (
                 attrTag (
-                  lib.mapAttrs' (name: resource: {
-                    ${name} = mkOption { type = resource.policy; };
-                  }) config.resources
+                  lib.mapAttrs (_name: resource: mkOption { type = submodule resource.policy; }) config.resources
                 )
               );
             };