diff --git a/roles/wireguard/templates/systemd-override.conf.j2 b/roles/wireguard/templates/systemd-override.conf.j2
new file mode 100644
index 0000000..78a600a
--- /dev/null
+++ b/roles/wireguard/templates/systemd-override.conf.j2
@@ -0,0 +1,5 @@
+[Unit]
+# Wait for network to be fully online before starting WireGuard
+# Ensures systemd-resolved is ready when WireGuard needs to configure DNS
+After=network-online.target systemd-resolved.service
+Wants=network-online.target