diff --git a/extra-repos/systemd/systemd-services/APKBUILD b/extra-repos/systemd/systemd-services/APKBUILD
index ffbd59b35831047e75154dd98ac542651ede99b6..48e8f51c636d0f81a60a7c79f19b827e6bb12fd0 100644
--- a/extra-repos/systemd/systemd-services/APKBUILD
+++ b/extra-repos/systemd/systemd-services/APKBUILD
@@ -8,7 +8,7 @@
 pkgname=systemd-services
 # 1. bump pkgver
 pkgver=63
-pkgrel=2
+pkgrel=3
 pkgdesc="Systemd service files"
 url="https://postmarketos.org"
 arch="noarch"
@@ -383,7 +383,7 @@ d5bf5f01c0feafab4edfc39b75eded608dc3efcd3b918739e3ed2ab11340c9cc9b6fb97c0706ddd3
 be9df5e3fd9c88ec1a8db4aa2d9e8075d74ee3d2670aa3cfc611df3cff4d4041ac888a0338c9d5f134bbc69aa32eb52ac40eb3e0981813afa18389cba14d3818  system-sleep-inhibitor.service
 399cd971b02e4b8bdfe60808ab1beac111b8618358f89a4482cafde1d19fe0a943d2ef6c20f5ad853581a85ab2297065187ade83eac7a664bd47412d0df7b2b6  user-syncthing.service
 41547eb369937348378e898e0dda7151552056107f4daab5a8a137a1b846560afa923cd345037b4f96bc9cdf2a7f66211a346b77229cc07ce2d0b634ff40dfe7  system-tailscaled.service
-324935213f1600e345acdfa70eae29181e9ee02e3aca6a03776ea4856137f72b5791e23aea46210cc756065cadd88fd1b8eb4b26a608fec94f662d683fcb9320  etc-default-tailscaled
+de63ecafaffc675f21d2a4b1e6b7e2c5464c03f7b2f79094d7f719c295190ac28b3cd85ba99a17bb9042d77ec323a6ffb5f108e33d28b6e7820d09250daadd57  etc-default-tailscaled
 23f854fa2d0e0cb4de54db8605e549bb32061470ea7fa8ac16d474149be635e2b20a815c4ea8088e583693d7f515651ad2872b45f3b38a762f686b977d4fc49d  system-tinydm.service
 c569b27925297672c479e12a6425abdf5791886fff77c2c2b67b7aa9277eb0a22e7b95b52dbc225870c97460d0988a4dae18ed864e19096c704c0895de55b699  system-tqftpserv.service
 c7ea2b18c9d8f82306fbaca6d07b7019de3819d7898c3f50c3d0aceef4da4d311ed3bf31385e2f8998b8e3e326b1eb13309ffd44cf1b2d9db9b40bca00222c16  system-udisks2.service
diff --git a/extra-repos/systemd/systemd-services/etc-default-tailscaled b/extra-repos/systemd/systemd-services/etc-default-tailscaled
index e8384a4f820971c9a5e9b28cec77d65ef4c7f4c0..b659e20918342019cb62891996c2ab1cf2e29e22 100644
--- a/extra-repos/systemd/systemd-services/etc-default-tailscaled
+++ b/extra-repos/systemd/systemd-services/etc-default-tailscaled
@@ -6,3 +6,10 @@ PORT="41641"
 
 # Extra flags you might want to pass to tailscaled.
 FLAGS=""
+
+# postmarketOS uses nftables by default, and tailscale has
+# some issues with the iptables frontend for it. So just
+# tell tailscale to use the nftables backend for routing
+# configuration.
+TS_DEBUG_FIREWALL_MODE=nftables
+