diff --git a/ops/nixos/lib/secretsmgr.nix b/ops/nixos/lib/secretsmgr.nix
index 080889dccd..5e3e42ae91 100644
--- a/ops/nixos/lib/secretsmgr.nix
+++ b/ops/nixos/lib/secretsmgr.nix
@@ -124,6 +124,7 @@ in
 
     systemd.timers.secretsmgr = {
       requires = ["vault-agent.service"];
+      wants = ["network-online.target"];
       after = ["vault-agent.service" "network-online.target"];
       wantedBy = ["timers.target"];