diff --git a/nixbld-etc-nixos/configuration.nix b/nixbld-etc-nixos/configuration.nix
index bdac38db..191536eb 100644
--- a/nixbld-etc-nixos/configuration.nix
+++ b/nixbld-etc-nixos/configuration.nix
@@ -445,6 +445,9 @@ in
       ];
     };
   };
+  # https://github.com/NixOS/nixpkgs/issues/106862
+  systemd.services."acme-fixperms".wants = [ "unbound.service" "dnsmasq.service" ];
+  systemd.services."acme-fixperms".after = [ "unbound.service" "dnsmasq.service" ];
   services.nginx = {
     enable = true;
     recommendedProxySettings = true;