diff --git a/nix/host-modules/hive-matrix.nix b/nix/host-modules/hive-matrix.nix
index 6cb59955..dbec19be 100644
--- a/nix/host-modules/hive-matrix.nix
+++ b/nix/host-modules/hive-matrix.nix
@@ -1048,9 +1048,10 @@ in
           # without the registration.
           ++ lib.optional ctlActive "${swarmAppserviceCredentialId}:${swarmAppserviceRuntimeDir}/swarm.yaml";
 
-          # Upstream's `Restart=on-failure` retries a start that failed for
-          # want of the registration; a start limit would end the retries.
-          systemd.services.tuwunel.startLimitIntervalSec = lib.mkIf ctlActive 0;
+          # Upstream retries with `Restart=on-failure` every 10 s under a start
+          # limit of 5 in 60 s, which would end the retries for want of the
+          # registration.
+          systemd.services.tuwunel.startLimitIntervalSec = lib.mkIf ctlActive (lib.mkForce 0);
 
           # The swarm registration, fetched from the store and rendered onto
           # the tmpfs before the homeserver loads it. A store that does not