diff --git a/systems/x86_64-linux/mx/default.nix b/systems/x86_64-linux/mx/default.nix
index b3a428b..4201096 100644
--- a/systems/x86_64-linux/mx/default.nix
+++ b/systems/x86_64-linux/mx/default.nix
@@ -18,6 +18,8 @@
     ./users.nix
   ];
 
+  services.tailscale.enable = true;
+
   metacfg = {
     emailOnFailure.enable = true;
     base.enable = true;
diff --git a/systems/x86_64-linux/sgx/default.nix b/systems/x86_64-linux/sgx/default.nix
index b1f94ee..cb61649 100644
--- a/systems/x86_64-linux/sgx/default.nix
+++ b/systems/x86_64-linux/sgx/default.nix
@@ -11,6 +11,8 @@
     ./mail.nix
   ];
 
+  services.tailscale.enable = true;
+
   boot.tmp.useTmpfs = false;
 
   sops.secrets.pccs.sopsFile = ../../../.secrets/sgx/pccs.yaml;
diff --git a/systems/x86_64-linux/x1/default.nix b/systems/x86_64-linux/x1/default.nix
index db59b9a..3ccc6d5 100644
--- a/systems/x86_64-linux/x1/default.nix
+++ b/systems/x86_64-linux/x1/default.nix
@@ -11,6 +11,8 @@ with lib.metacfg;
     ./hardware-configuration.nix
   ];
 
+  services.tailscale.enable = true;
+
   services.cratedocs-mcp.enable = true;
 
   sops.age.sshKeyPaths = [ "/var/lib/secrets/ssh_host_ed25519_key" ];