diff --git a/ops/nixos/lib/blade.nix b/ops/nixos/lib/blade.nix
index bdbd76ec11..d0fad8b8c6 100644
--- a/ops/nixos/lib/blade.nix
+++ b/ops/nixos/lib/blade.nix
@@ -78,6 +78,9 @@ in {
   
       defaultGateway = lib.mkDefault "10.100.0.1";
   
+      firewall.allowedUDPPorts = [
+        41641 # Tailscale
+      ];
       firewall.allowedTCPPorts = lib.mkIf config.services.ceph.enable [ 6789 3300 ];
       firewall.allowedTCPPortRanges = lib.mkIf config.services.ceph.enable [{ from = 6800; to = 7300; }];