diff --git a/modules/sops/default.nix b/modules/sops/default.nix
index 47e022d..9f19ab6 100644
--- a/modules/sops/default.nix
+++ b/modules/sops/default.nix
@@ -467,7 +467,7 @@ in
       # When using sysusers we no longer are started as an activation script because those are started in initrd while sysusers is started later.
       systemd.services.sops-install-secrets = lib.mkIf (regularSecrets != { } && cfg.useSystemdActivation) {
         wantedBy = [ "sysinit.target" ];
-        after = [ "systemd-sysusers.service" "userborn.service" ];
+        after = [ "local-fs.target" "systemd-sysusers.service" "userborn.service" ];
         requiredBy = [ "sysinit-reactivation.target" ];
         before = [ "sysinit-reactivation.target" ];
         environment = cfg.environment;