diff --git a/debian/wit-network-config.postinst b/debian/wit-network-config.postinst
index c8a2ca9..8ced20a 100755
--- a/debian/wit-network-config.postinst
+++ b/debian/wit-network-config.postinst
@@ -344,6 +344,7 @@ case "$1" in
 
         systemctl disable strongswan    # disable ipsec till we have the certs and all ansible will enable it after dropping certs
         systemctl enable firewall
+        systemctl enable systemd-timesyncd
         systemctl restart systemd-timesyncd
         systemctl restart ssh