diff --git a/nixos/acme.nix b/nixos/acme.nix
index 831b33f0..bf7aae0a 100644
--- a/nixos/acme.nix
+++ b/nixos/acme.nix
@@ -63,4 +63,14 @@ in {
     acme_cloudflare_email = acmeSecret;
     acme_cloudflare_token = acmeSecret;
   };
+  systemd.services = let
+    after = [ "systemd-tmpfiles-resetup.service" ];
+  in {
+    acme-fixperms = {
+      inherit after;
+    };
+    acme-lockfiles = {
+      inherit after;
+    };
+  };
 }