diff --git a/ops/nixos/lib/common.nix b/ops/nixos/lib/common.nix
index 234be40aa8..4d753e83a2 100644
--- a/ops/nixos/lib/common.nix
+++ b/ops/nixos/lib/common.nix
@@ -251,5 +251,10 @@ in
     };
 
     services.fwupd.enable = true;
+    services.journald.enableHttpGateway = config.my.ip.tailscale != null;
+    systemd.sockets.systemd-journal-gatewayd.socketConfig = lib.optionalAttrs (config.my.ip.tailscale != null) {
+      ListenStream = [ "" "${config.my.ip.tailscale}:19531" "127.0.0.1:19531" "[::1]:19531" ];
+      FreeBind = true;
+    };
   };
 }