diff --git a/nixos/hosts/bakersfield-rpi4/default.nix b/nixos/hosts/bakersfield-rpi4/default.nix
index 05e79b43..46e0a9ba 100644
--- a/nixos/hosts/bakersfield-rpi4/default.nix
+++ b/nixos/hosts/bakersfield-rpi4/default.nix
@@ -8,7 +8,8 @@
   networking.hostName = "bakersfield-rpi4";
   services.tailscale.extraUpFlags = [ 
     "--advertise-exit-node" 
-    "--advertise-routes=192.168.1.13/32,192.168.1.14/32,192.168.1.15/32,192.168.1.100/32,192.168.1.31/32,192.168.1.101/32" 
+    "--advertise-routes=192.168.1.13/32,192.168.1.14/32,192.168.1.15/32,192.168.1.100/32,192.168.1.31/32,192.168.1.101/32,192.168.1.99/32,192.168.1.0/24" 
   ];
   boot.kernel.sysctl = { "net.ipv4.ip_forward" = true; };
+  networking.firewall.allowedTCPPorts = [ 22 ];
 }
diff --git a/nixos/hosts/nuc-server/default.nix b/nixos/hosts/nuc-server/default.nix
index 91281236..89e4f434 100644
--- a/nixos/hosts/nuc-server/default.nix
+++ b/nixos/hosts/nuc-server/default.nix
@@ -38,10 +38,10 @@
 
   # Set the networking hostname:
   networking.hostName = "nuc-server";
-  # networking.firewall.allowedTCPPorts = [ 22 ];
+  networking.firewall.allowedTCPPorts = [ 22 ];
 
   services.tailscale.extraUpFlags = [ 
     "--advertise-exit-node" 
-    "--advertise-routes=192.168.1.13/32,192.168.1.14/32,192.168.1.15/32,192.168.1.100/32,192.168.1.31/32" 
+    "--advertise-routes=192.168.1.13/32,192.168.1.14/32,192.168.1.15/32,192.168.1.100/32,192.168.1.31/32,192.168.1.99/32,192.168.1.0/24" 
   ];
 }