diff --git a/nixos/modules/services/misc/taskserver/default.nix b/nixos/modules/services/misc/taskserver/default.nix
index d82e9f77ea6a..c06287fe3b7e 100644
--- a/nixos/modules/services/misc/taskserver/default.nix
+++ b/nixos/modules/services/misc/taskserver/default.nix
@@ -396,6 +396,7 @@ in {
     systemd.services.taskserver-ca = mkIf needToCreateCA {
       requiredBy = [ "taskserver.service" ];
       after = [ "taskserver-init.service" ];
+      before = [ "taskserver.service" ];
       description = "Initialize CA for TaskServer";
       serviceConfig.Type = "oneshot";
       serviceConfig.UMask = "0077";