diff --git a/modules/global/networking.nix b/modules/global/networking.nix
index ac40627..4652b6e 100644
--- a/modules/global/networking.nix
+++ b/modules/global/networking.nix
@@ -25,6 +25,10 @@
       "2696:4700:4700::1111"
       "2696:4700:4700::1111"
     ];
+
+    nftables = {
+      enable = true;
+    };
   };
 
   services = {
@@ -36,4 +40,8 @@
 
     zerotierone.enable = false;
   };
+
+  systemd.services.tailscaled.serviceConfig.Environment = [
+    "TS_DEBUG_FIREWALL_MODE=nftables"
+  ];
 }