diff --git a/servers/hetzner/modules/services/coredns.nix b/servers/hetzner/modules/services/coredns.nix
index d7af4f6..29c14bb 100644
--- a/servers/hetzner/modules/services/coredns.nix
+++ b/servers/hetzner/modules/services/coredns.nix
@@ -91,7 +91,8 @@ in {
         '';
       };
       coredns = {
-        after = ["decrypt-coredns-keys.service"];
+        after = ["decrypt-coredns-keys.service" "network-online.target"];
+        wants = ["network-online.target"];
         requires = ["decrypt-coredns-keys.service"];
 
         # Copy zone file from Nix store to writable location on service start