accept-routes=true is a set flag

modules/services/tailscale/default.nix

@@ -34,10 +34,10 @@ in
         enable = true;
         extraUpFlags = [
           "--operator=${config.mj.username}"
-          "--accept-routes=true"
         ];
         extraSetFlags = [
           "--accept-dns=${if cfg.acceptDNS then "true" else "false"}"
+          "--accept-routes=true"
         ];
       };
       networking.firewall.checkReversePath = "loose";