diff --git a/modules/system/services/nebula/default.nix b/modules/system/services/nebula/default.nix
index f31502c..37aa9db 100644
--- a/modules/system/services/nebula/default.nix
+++ b/modules/system/services/nebula/default.nix
@@ -113,6 +113,7 @@ in
         pki.disconnect_invalid = true;
         cipher = "aes";
         logging.level = "warning";
+        lighthouse.local_allow_list.interfaces.tailscale0 = false;
       };
     };