diff --git a/machines/valkyrie/configuration.nix b/machines/valkyrie/configuration.nix
index 22399e3..5fc68ec 100644
--- a/machines/valkyrie/configuration.nix
+++ b/machines/valkyrie/configuration.nix
@@ -37,6 +37,8 @@
     privileged = true;
   };
 
+  networking.firewall.trustedInterfaces = [ "tailscale0" ];
+
   security.sudo.execWheelOnly = true;
 
   services.tailscale.enable = true;