diff --git a/hosts/bagel-box/default.nix b/hosts/bagel-box/default.nix
index 5d153ac..df74126 100644
--- a/hosts/bagel-box/default.nix
+++ b/hosts/bagel-box/default.nix
@@ -53,5 +53,6 @@
 
   services.openssh.enable = true;
 
+  system.stateVersion = "24.11";
   deployment.targetHost = "bagel-box.infra.forkos.org";
 }
diff --git a/hosts/git/default.nix b/hosts/git/default.nix
index 065c4f3..4399485 100644
--- a/hosts/git/default.nix
+++ b/hosts/git/default.nix
@@ -34,6 +34,7 @@ in
   # the required (additional) IPv6 address, leading to sshd to not being able to
   # bind to the requested IP, crashing 5 times and running into the default
   # restart counter limit (5).
+  systemd.services.sshd.wants = [ "network-online.target" ];
   systemd.services.sshd.after = [ "network-online.target" ];
 
   bagel.services.forgejo = {