diff --git a/hosts/sobotka/server.nix b/hosts/sobotka/server.nix
index d8f5acf3..392f349e 100644
--- a/hosts/sobotka/server.nix
+++ b/hosts/sobotka/server.nix
@@ -32,7 +32,7 @@
     wireguard-netns = {
       enable = true;
       namespace = "vpn";
-      configFile = config.age.secrets.wireguardCredentials.path;
+      configFile = config.age.secrets.wgCredentials.path;
     };
   };
 }
diff --git a/modules/server/wireguard-netns/default.nix b/modules/server/wireguard-netns/default.nix
index 1fe12422..f7693f0e 100644
--- a/modules/server/wireguard-netns/default.nix
+++ b/modules/server/wireguard-netns/default.nix
@@ -23,6 +23,7 @@ in {
     systemd.services."netns@${cfg.namespace}" = {
       description = "WireGuard VPN netns (${cfg.namespace})";
       after = ["network-online.target"];
+      wants = ["network-online.target"];
       wantedBy = ["multi-user.target"];
       serviceConfig = {
         Type = "oneshot";