diff --git a/modules/system/services/nebula/dns.nix b/modules/system/services/nebula/dns.nix
index f750fc1..51b04fa 100644
--- a/modules/system/services/nebula/dns.nix
+++ b/modules/system/services/nebula/dns.nix
@@ -29,13 +29,18 @@ in
               |> lib.map (node: "\"${node.name}.${nebulaCfg.network.domain}. A ${node.address}\"");
           };
 
-          forward-zone = lib.singleton {
-            name = ".";
-            forward-addr = [
-              "1.1.1.1"
-              "8.8.8.8"
-            ];
-          };
+          forward-zone =
+            (lib.singleton {
+              name = ".";
+              forward-addr = [
+                "1.1.1.1"
+                "8.8.8.8"
+              ];
+            })
+            ++ lib.optional config.custom.services.tailscale.enable {
+              name = "${config.custom.services.tailscale.domain}";
+              forward-addr = [ "100.100.100.100" ];
+            };
         };
       };