diff --git a/modules/media-proxy.nix b/modules/media-proxy.nix
index 591ba11..c66592d 100644
--- a/modules/media-proxy.nix
+++ b/modules/media-proxy.nix
@@ -16,6 +16,8 @@ in
     };
     users.users.nginx.extraGroups = [ "keys" ];
 
+    # otherwise name resolution fails
+    systemd.services.nginx.after = [ "network-online.target" ];
     services.nginx = {
       enable = true;
       virtualHosts.media-proxy = {