diff --git a/flake.lock b/flake.lock
index 301b821..99d45eb 100644
--- a/flake.lock
+++ b/flake.lock
@@ -44,8 +44,8 @@
         "nixpkgs": "nixpkgs_2"
       },
       "locked": {
-        "lastModified": 1744899798,
-        "narHash": "sha256-CpFRif9OCEX4fEOtQKkGvyXPbdWfhCXehfbqiAmHkYY=",
+        "lastModified": 1743373947,
+        "narHash": "sha256-u0ng3qUqW5J1hBQACbhBkAOlyouY2VVX1AdxrYPOqkI=",
         "path": "/etc/nixos/pkgs/caddy",
         "type": "path"
       },
@@ -56,11 +56,11 @@
     },
     "caddy_2": {
       "locked": {
-        "lastModified": 1742276417,
-        "narHash": "sha256-iEGJYhUsjJdxFviduw7zUGdYewf/W7QodEuF1w8MqF0=",
+        "lastModified": 1735284852,
+        "narHash": "sha256-mQu3IwEO294DuB7XAXOvOLriElDgRTf6rTLoDh3tMFQ=",
         "owner": "vincentbernat",
         "repo": "caddy-nix",
-        "rev": "f0f28d2b4bd1fd433726e334a462d029f0440baa",
+        "rev": "b421380ded7c000f432092df0f1a7afd9e187173",
         "type": "github"
       },
       "original": {
@@ -153,11 +153,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1744743431,
-        "narHash": "sha256-iyn/WBYDc7OtjSawbegINDe/gIkok888kQxk3aVnkgg=",
+        "lastModified": 1742655702,
+        "narHash": "sha256-jbqlw4sPArFtNtA1s3kLg7/A4fzP4GLk9bGbtUJg0JQ=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "c61bfe3ae692f42ce688b5865fac9e0de58e1387",
+        "rev": "0948aeedc296f964140d9429223c7e4a0702a1ff",
         "type": "github"
       },
       "original": {
@@ -169,11 +169,11 @@
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1744633460,
-        "narHash": "sha256-fbWE4Xpw6eH0Q6in+ymNuDwTkqmFmtxcQEmtRuKDTTk=",
+        "lastModified": 1742806253,
+        "narHash": "sha256-zvQ4GsCJT6MTOzPKLmlFyM+lxo0JGQ0cSFaZSACmWfY=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "9a049b4a421076d27fee3eec664a18b2066824cb",
+        "rev": "ecaa2d911e77c265c2a5bac8b583c40b0f151726",
         "type": "github"
       },
       "original": {
@@ -216,11 +216,11 @@
     },
     "nixpkgsUnstable": {
       "locked": {
-        "lastModified": 1744463964,
-        "narHash": "sha256-LWqduOgLHCFxiTNYi3Uj5Lgz0SR+Xhw3kr/3Xd0GPTM=",
+        "lastModified": 1742669843,
+        "narHash": "sha256-G5n+FOXLXcRx+3hCJ6Rt6ZQyF1zqQ0DL0sWAMn2Nk0w=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "2631b0b7abcea6e640ce31cd78ea58910d31e650",
+        "rev": "1e5b653dff12029333a6546c11e108ede13052eb",
         "type": "github"
       },
       "original": {
@@ -233,8 +233,8 @@
     "nixpkgs_2": {
       "locked": {
         "lastModified": 0,
-        "narHash": "sha256-rBfc+H1dDBUQ2mgVITMGBPI1PGuCznf9rcWX/XIULyE=",
-        "path": "/nix/store/sr3gj4wcx3kwy0q5gcxl49ja733bqm7b-source",
+        "narHash": "sha256-GFzPxJzTd1rPIVD4IW+GwJlyGwBDV1Tj5FLYwDQQ9sM=",
+        "path": "/nix/store/50yickar04m51aqnc43gxf45g2i0n3k9-source",
         "type": "path"
       },
       "original": {
@@ -244,11 +244,11 @@
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1744440957,
-        "narHash": "sha256-FHlSkNqFmPxPJvy+6fNLaNeWnF1lZSgqVCl/eWaJRc4=",
+        "lastModified": 1742751704,
+        "narHash": "sha256-rBfc+H1dDBUQ2mgVITMGBPI1PGuCznf9rcWX/XIULyE=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "26d499fc9f1d567283d5d56fcf367edd815dba1d",
+        "rev": "f0946fa5f1fb876a9dc2e1850d9d3a4e3f914092",
         "type": "github"
       },
       "original": {
diff --git a/roles/tailscale.nix b/roles/tailscale.nix
index 9300026..f41449e 100644
--- a/roles/tailscale.nix
+++ b/roles/tailscale.nix
@@ -6,14 +6,7 @@
 }:
 
 {
-  services.tailscale = {
-    enable = true;
-    useRoutingFeatures = "both";
-  };
+  services.tailscale.enable = true;
   # See https://github.com/NixOS/nixpkgs/issues/180175#issuecomment-2541381489
-  systemd.services.tailscaled.after = [
-    "systemd-networkd-wait-online.service"
-  ];
-  # See https://github.com/tailscale/tailscale/issues/4432#issuecomment-1112819111
-  networking.firewall.checkReversePath = "loose";
+  systemd.services.tailscaled.after = [ "systemd-networkd-wait-online.service" ];
 }