From a4805bc6c937e3a1e7cc0dfa065f2f83d97ed8b5 Mon Sep 17 00:00:00 2001
From: Clara Engler <cve@cve.cx>
Date: Sun, 12 Jul 2026 16:37:06 +0200
Subject: [PATCH] nixos/nsd: After/Want network-online.target

This is required in the case one uses nsd as a primary name server.
Otherwise, the nsd instance cannot notify the secondary name servers
properly, as the network may still be unreachable by that point.
---
 nixos/modules/services/networking/nsd.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/nixos/modules/services/networking/nsd.nix b/nixos/modules/services/networking/nsd.nix
index c45039458b26..c0c820cadb63 100644
--- a/nixos/modules/services/networking/nsd.nix
+++ b/nixos/modules/services/networking/nsd.nix
@@ -988,8 +988,9 @@ in
     systemd.services.nsd = {
       description = "NSD authoritative only domain name service";
 
-      after = [ "network.target" ];
+      after = [ "network-online.target" ];
       wantedBy = [ "multi-user.target" ];
+      wants = [ "network-online.target" ];
 
       startLimitBurst = 4;
       startLimitIntervalSec = 5 * 60; # 5 mins