diff --git a/nixos/modules/security/gnupg.nix b/nixos/modules/security/gnupg.nix
index 7ddb1fac2f5..89a16bab2e4 100644
--- a/nixos/modules/security/gnupg.nix
+++ b/nixos/modules/security/gnupg.nix
@@ -225,6 +225,7 @@ config = lib.mkIf (cfg.secrets != {}) {
         description = "Install secret ${secret.path}";
         after = lib.optional cfg.enableGpgAgent "gpg-agent.service";
         wants = lib.optional cfg.enableGpgAgent "gpg-agent.service";
+        wantedBy = ["multi-user.target"];
         script = ''
           set -o pipefail
           set -eux