--- a/modules/nixos/secrets.nix
+++ b/modules/nixos/secrets.nix
@@ -59,7 +59,7 @@
     };
   };
   config = {
-    system.activationScripts.decryptSecrets = stringAfter ["users" "groups"] ''
+    system.activationScripts.decryptSecrets = stringAfter [ "users" "groups" "specialfs" ] ''
       1>&2 echo "setting up secrets"
       ${pkgs.fleet-install-secrets}/bin/fleet-install-secrets ${secretsFile}
     '';