diff --git a/nixos/hosts/nixos-desktop/default.nix b/nixos/hosts/nixos-desktop/default.nix
index 99f1dc42..761eeb1c 100644
--- a/nixos/hosts/nixos-desktop/default.nix
+++ b/nixos/hosts/nixos-desktop/default.nix
@@ -58,4 +58,18 @@
     # RGB stuff
     pkgs.openrgb-with-all-plugins
   ];
+
+  # Generic Tailscale configs are in /nixos/common/services/tailscale.nix
+  # Set up the secrets file:
+  sops.secrets."tailscale_keys/nixos-desktop" = {
+    owner = "root";
+    sopsFile = ../../../secrets/tailscale.yaml;
+    restartUnits = [
+      "tailscaled.service"
+      "tailscaled-autoconnect.service"
+    ];
+  };
+  services.tailscale.authKeyFile = "/run/secrets/tailscale_keys/nixos-desktop";
+  # networking.firewall.allowedTCPPorts = [ 22 ];
+
 }