diff --git a/flake.lock b/flake.lock
index c3abf0a..fbfbf11 100644
--- a/flake.lock
+++ b/flake.lock
@@ -633,11 +633,11 @@
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1737312124,
-        "narHash": "sha256-eZ4WNkrX/0WZVuJbFatnOeMzIn4sUGs7RmRzU1cDGsI=",
+        "lastModified": 1737325604,
+        "narHash": "sha256-nN3e6WnE6cP4GLbDnDRY/cO1vB3HmWViht7m17vXgOE=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "8dab93a8c1411065f83fd60db8076dd6908449c3",
+        "rev": "1a0411805bc16f5a9571683e986aa1e583673b50",
         "type": "github"
       },
       "original": {
@@ -699,11 +699,11 @@
         "treefmt-nix": "treefmt-nix_3"
       },
       "locked": {
-        "lastModified": 1737312190,
-        "narHash": "sha256-ZD2RCrIM/n90sWCMGEalMqgLnDlRCTrI0kFTGs+yvhI=",
+        "lastModified": 1737324996,
+        "narHash": "sha256-zWmNplzxsbMus2InIAVS9L9O1fscm+SG1XNjMUZxwqQ=",
         "owner": "nix-community",
         "repo": "NUR",
-        "rev": "1fedeccb422c9f109cd9663d0936d020f5e5230b",
+        "rev": "de30640a76ddbada94babffe43f5e457282bed08",
         "type": "github"
       },
       "original": {
diff --git a/hosts/semita/default.nix b/hosts/semita/default.nix
index f37abfa..7fd9f54 100644
--- a/hosts/semita/default.nix
+++ b/hosts/semita/default.nix
@@ -80,6 +80,8 @@ in {
     fsType = "ext4";
   };
 
+  services.tailscale.useRoutingFeatures = "server";
+
   boot = {
     blacklistedKernelModules = ["snd_hda_intel" "snd_soc_skl"];
     kernelPackages = pkgs.linuxPackagesFor pkgs.linux_latest;
@@ -162,6 +164,11 @@ in {
 
   programs.fuse.userAllowOther = true;
 
+  boot.kernel.sysctl = {
+    "net.ipv4.ip_forward" = true;
+    "net.ipv6.conf.all.forwarding" = true;
+  };
+
   networking = {
     hostName = "semita";
     nameservers = ["${piholeIp}" "${gatewayIp}" "8.8.8.8"];