diff --git a/ops/nixos/lib/vault-agent-secrets.nix b/ops/nixos/lib/vault-agent-secrets.nix
index 6bbdb66d4e..baa12ebe93 100644
--- a/ops/nixos/lib/vault-agent-secrets.nix
+++ b/ops/nixos/lib/vault-agent-secrets.nix
@@ -97,6 +97,8 @@ in
       services.vault-agent = {
         serviceConfig = {
           SupplementaryGroups = mkBefore secretsGroups;
+        };
+        unitConfig = {
           Before = mkBefore allRestartableUnits;
         };
       };