diff --git a/modules/tailscale/default.nix b/modules/tailscale/default.nix
index 0109d84..240f5b0 100644
--- a/modules/tailscale/default.nix
+++ b/modules/tailscale/default.nix
@@ -4,14 +4,17 @@ let
   cfg = config.eboskma.tailscale;
 in
 {
-  options.eboskma.tailscale = { enable = mkEnableOption "tailscale"; };
+  options.eboskma.tailscale = {
+    enable = mkEnableOption "tailscale";
+    nftables = mkEnableOption "nftables";
+  };
 
   config = mkIf cfg.enable {
     services.tailscale = {
       enable = true;
     };
 
-    systemd.services.tailscaled.environment = {
+    systemd.services.tailscaled.environment = mkIf cfg.nftables {
       TS_DEBUG_FIREWALL_MODE = "auto";
     };
   };