diff --git a/lib/fudo/secrets.nix b/lib/fudo/secrets.nix
index dd20287..7a910d9 100644
--- a/lib/fudo/secrets.nix
+++ b/lib/fudo/secrets.nix
@@ -40,7 +40,9 @@ let
       description =
         "decrypt secret ${secret-name} at ${target-host}:${target-file}.";
       wantedBy = [ cfg.secret-target "multi-user.target" ];
+      requires = [ "local-fs.target" ];
       before = [ cfg.secret-target "multi-user.target" ];
+      after = [ "local-fs.target" ];
       serviceConfig = {
         Type = "oneshot";
         RemainAfterExit = true;