diff --git a/common/network/tailscale.nix b/common/network/tailscale.nix
index f0e65c7..3340c1c 100644
--- a/common/network/tailscale.nix
+++ b/common/network/tailscale.nix
@@ -8,7 +8,7 @@ in
 {
   options.services.tailscale.exitNode = mkEnableOption "Enable exit node support";
 
-  config.services.tailscale.enable = true;
+  config.services.tailscale.enable = !config.boot.isContainer;
 
   # exit node
   config.networking.firewall.checkReversePath = mkIf cfg.exitNode "loose";