diff --git a/nix/host-modules/hive-ci.nix b/nix/host-modules/hive-ci.nix
index 8c82c80a..efa48636 100644
--- a/nix/host-modules/hive-ci.nix
+++ b/nix/host-modules/hive-ci.nix
@@ -370,7 +370,7 @@ in
         # loop until the forge/token settle. Bumping the timeout well past
         # the prefetch's own 60s wait gives one register attempt room to
         # actually finish instead of being killed mid-flight.
-        serviceConfig.TimeoutStartSec = "180s";
+        serviceConfig.TimeoutStartSec = lib.mkForce "180s";
       }
     ];