diff --git a/debian/knockd.service b/debian/knockd.service
index 2c9aad4..48d51bd 100644
--- a/debian/knockd.service
+++ b/debian/knockd.service
@@ -1,6 +1,7 @@
 [Unit]
 Description=Port-Knock Daemon
-After=network.target
+After=network-online.target
+Wants=network-online.target
 Documentation=man:knockd(1)
 
 [Service]
@@ -10,7 +11,7 @@ ExecReload=/bin/kill -HUP $MAINPID
 KillMode=mixed
 SuccessExitStatus=0 2 15
 ProtectSystem=full
-CapabilityBoundingSet=CAP_NET_RAW CAP_NET_ADMIN
+CapabilityBoundingSet=CAP_NET_RAW CAP_NET_ADMIN CAP_SYS_MODULE
 
 [Install]
 WantedBy=multi-user.target