diff --git a/modules/arr-slime.nix b/modules/arr-slime.nix
index 41508c5..255faab 100644
--- a/modules/arr-slime.nix
+++ b/modules/arr-slime.nix
@@ -430,6 +430,17 @@
             };
           };
 
+          # prowlarr-indexers.service is a oneshot that configures indexers
+          # via the Prowlarr API. If Prowlarr isn't ready yet, the API call
+          # fails with exit code 1. Add restart behaviour so transient
+          # failures (e.g. Prowlarr starting up) retry automatically.
+          systemd.services."prowlarr-indexers" = {
+            serviceConfig = {
+              Restart = lib.mkOverride 90 "on-failure";
+              RestartSec = lib.mkOverride 90 "10s";
+            };
+          };
+
           # Nixflix sets Restart=on-failure but doesn't set RestartSec or
           # StartLimitBurst, so rapid restarts hit the systemd default rate
           # limit (5 failures / 10s) and the unit is permanently stopped.
diff --git a/modules/hosts/203-media.nix b/modules/hosts/203-media.nix
index cb0e843..426c5bb 100644
--- a/modules/hosts/203-media.nix
+++ b/modules/hosts/203-media.nix
@@ -58,7 +58,7 @@
       # directly reachable on ens19 regardless of address-assignment timing.
       networking.localCommands = ''
         ip route flush table 203 2>/dev/null || true
-        ip route add default via 192.168.3.1 dev ens19 table 203 onlink
+        ip route add default via 192.168.3.1 onlink dev ens19 table 203
         ip rule del from 192.168.3.203 lookup 203 2>/dev/null || true
         ip rule add from 192.168.3.203 lookup 203
       '';