diff --git a/hosts/common/network.nix b/hosts/common/network.nix
index 1da7ce37..bfa343de 100644
--- a/hosts/common/network.nix
+++ b/hosts/common/network.nix
@@ -50,7 +50,8 @@
 
   services.tailscale = {
     enable = true;
-    openFirewall = true;
     authKeyFile = config.age.secrets.tailscaleAuthKey.path;
+    extraUpFlags = ["--ssh"];
+    openFirewall = true;
   };
 }