From f1feaac0262162e9f5286d8f29d6a255c7ec0f16 Mon Sep 17 00:00:00 2001
From: Joshua Leivenzon <hacker1024@users.sourceforge.net>
Date: Fri, 6 Feb 2026 17:29:27 +1100
Subject: [PATCH] Wait for local-fs.target in sops-install-secrets.service

---
 modules/sops/default.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/sops/default.nix b/modules/sops/default.nix
index 47e022d..9f19ab6 100644
--- a/modules/sops/default.nix
+++ b/modules/sops/default.nix
@@ -467,7 +467,7 @@ in
       # When using sysusers we no longer are started as an activation script because those are started in initrd while sysusers is started later.
       systemd.services.sops-install-secrets = lib.mkIf (regularSecrets != { } && cfg.useSystemdActivation) {
         wantedBy = [ "sysinit.target" ];
-        after = [ "systemd-sysusers.service" "userborn.service" ];
+        after = [ "local-fs.target" "systemd-sysusers.service" "userborn.service" ];
         requiredBy = [ "sysinit-reactivation.target" ];
         before = [ "sysinit-reactivation.target" ];
         environment = cfg.environment;