diff --git a/modules/homelab/tailscale/default.nix b/modules/homelab/tailscale/default.nix
index fe3b40b..e9cee78 100644
--- a/modules/homelab/tailscale/default.nix
+++ b/modules/homelab/tailscale/default.nix
@@ -14,6 +14,7 @@ in {
   config = lib.mkIf cfg.enable {
     services.tailscale = {
       enable = true;
+      openFirewall = true;
       useRoutingFeatures = "both";
       authKeyFile = authkey_file;
       extraUpFlags = [