diff --git a/modules/server/services/headscale.nix b/modules/server/services/headscale.nix
index 478e65fa..29232c89 100644
--- a/modules/server/services/headscale.nix
+++ b/modules/server/services/headscale.nix
@@ -99,6 +99,11 @@ in {
       webroot = null;
     };
 
+    boot.kernel.sysctl = {
+      "net.ipv4.ip_forward" = 1;
+      "net.ipv6.conf.all.forwarding" = 1;
+    };
+
     systemd.services = { tailscaled.after = [ "headscale.service" ]; };
 
   };