diff --git a/system/network/tailscale.nix b/system/network/tailscale.nix
index bfe4be4..90e6c76 100644
--- a/system/network/tailscale.nix
+++ b/system/network/tailscale.nix
@@ -12,5 +12,12 @@ in {
       default = true;
     };
   };
-  config.services.tailscale.enable = cfg.enable;
+  config.services.tailscale = {
+    enable = cfg.enable;
+    extraSetFlags = [
+      "--accept-dns"
+      "--accept-routes"
+      "--ssh"
+    ];
+  };
 }