diff --git a/modules/services/tailscale/default.nix b/modules/services/tailscale/default.nix
index e799bf9..acdd070 100644
--- a/modules/services/tailscale/default.nix
+++ b/modules/services/tailscale/default.nix
@@ -34,10 +34,10 @@ in
         enable = true;
         extraUpFlags = [
           "--operator=${config.mj.username}"
-          "--accept-routes=true"
         ];
         extraSetFlags = [
           "--accept-dns=${if cfg.acceptDNS then "true" else "false"}"
+          "--accept-routes=true"
         ];
       };
       networking.firewall.checkReversePath = "loose";