diff --git a/modules/system/tailscale.nix b/modules/system/tailscale.nix
index 7d0fe06..aeaf06b 100644
--- a/modules/system/tailscale.nix
+++ b/modules/system/tailscale.nix
@@ -17,10 +17,10 @@ in
       authKeyFile = config.sops.secrets.tailscale-auth-key.path;
       openFirewall = true;
       useRoutingFeatures = if cfg.exitNode.enable then "server" else "client";
-      extraUpFlags = [
-        "--reset=true"
-        (lib.mkIf cfg.ssh.enable "--ssh")
-        (lib.mkIf cfg.exitNode.enable "--advertise-exit-node")
+      extraUpFlags = [ "--reset=true" ];
+      extraSetFlags = [
+        "--ssh=${lib.boolToString cfg.ssh.enable}"
+        "--advertise-exit-node=${lib.boolToString cfg.exitNode.enable}"
       ];
     };
   };