diff --git a/modules/services/networking/tcpcrypt.nix b/modules/services/networking/tcpcrypt.nix
index 3d8eeab155f..48cb884f246 100644
--- a/modules/services/networking/tcpcrypt.nix
+++ b/modules/services/networking/tcpcrypt.nix
@@ -38,7 +38,8 @@ in
     jobs.tcpcrypt = {
       description = "tcpcrypt";
 
-      startOn = "started network-interfaces";
+      wantedBy = ["multi-user.target"];
+      after = ["network-interfaces.target"];
 
       path = [ pkgs.iptables pkgs.tcpcrypt pkgs.procps ];