diff --git a/workstation/default.nix b/workstation/default.nix
index 0e3e957..80ddfa3 100644
--- a/workstation/default.nix
+++ b/workstation/default.nix
@@ -272,11 +272,13 @@ in
 
     # allow you to SSH in over the public internet
     allowedTCPPorts = [ 22 ];
-    #interfaces = {
-      #"tailscale0" = {
-        #allowedTCPPorts = [ 22 8080 8443 ];
-      #};
-    #};
+    interfaces = {
+      "tailscale0" = {
+        allowedTCPPorts = [ 22 8080 8443 ];
+        allowedTCPPortRanges = [ { from = 1714 ; to = 1764; } ];
+        allowedUDPPortRanges = [ { from = 1714 ; to = 1764; } ];
+      };
+    };
   };