diff --git a/nix/nixos-module/container/anon.nix b/nix/nixos-module/container/anon.nix
index d9231c6..c45c1c8 100644
--- a/nix/nixos-module/container/anon.nix
+++ b/nix/nixos-module/container/anon.nix
@@ -17,6 +17,8 @@ in
     "wireguard-key-${ifName}" = {
       description = "Create key file for wireguard interface '${ifName}'";
       requiredBy = [ "systemd-networkd.service" ];
+      before = [ "systemd-networkd.service" ];
+      serviceConfig.Type = "oneshot";
       script = ''
         #! ${pkgs.runtimeShell} -e