diff --git a/src/cloudron.js b/src/cloudron.js
index a49ac977a..981a12e7c 100644
--- a/src/cloudron.js
+++ b/src/cloudron.js
@@ -83,6 +83,7 @@ async function onActivated(options) {
     await platform.start(options);
     await cron.startJobs();
     await dockerProxy.start(); // this relies on the 'cloudron' docker network interface to be available
+    await oidc.start(); // this requires dashboardFqdn to be set
 
     // disable responding to api calls via IP to not leak domain info. this is carefully placed as the last item, so it buys
     // the UI some time to query the dashboard domain in the restore code path
@@ -278,9 +279,6 @@ async function setDashboardDomain(domain, auditSource) {
 
     await safe(appstore.updateCloudron({ domain }), { debug });
 
-    // this requires dashboardFqdn to be set
-    await oidc.start();
-
     await eventlog.add(eventlog.ACTION_DASHBOARD_DOMAIN_UPDATE, auditSource, { domain, fqdn });
 }