diff --git a/config.yaml b/config.yaml
index e10943f..061e8be 100644
--- a/config.yaml
+++ b/config.yaml
@@ -63,3 +63,8 @@ systemd:
     - name: generate-secrets.service
       enabled: true
       contents_local: generate-secrets.service
+    # docker.service
+    - name: docker.service
+      dropins:
+        - name: docker.conf
+          contents_local: docker.conf
diff --git a/files/docker.conf b/files/docker.conf
new file mode 100644
index 0000000..eb23c3a
--- /dev/null
+++ b/files/docker.conf
@@ -0,0 +1,3 @@
+[Unit]
+After=generate-secrets.service
+Requires=generate-secrets.service