diff --git a/tailscale.nix b/tailscale.nix
index 4609f87..a8b095b 100644
--- a/tailscale.nix
+++ b/tailscale.nix
@@ -4,4 +4,6 @@
 
   # enable the tailscale service
   services.tailscale.enable = true;
+
+  networking.firewall.checkReversePath = "loose";
 }