Use After=network-online.target
See:
https://fedoraproject.org/wiki/Networking/Ideas/ServiceOrdering
See also the full discussion:
https://bugzilla.redhat.com/show_bug.cgi?id=1119787
This bug can be worked around by using bind_ip=0.0.0.0. However,
all our deployment tools use explicit IPs. This is necessary in
cases when a separate replication network is used, for one.
In a completely unrelated change, swifch permissions of SystemD
units to 644, else it complains in /var/log/messages.
Resolves: rhbz#1150590