diff --git a/nixosConfigurations/hetzner-vpn2/default.nix b/nixosConfigurations/hetzner-vpn2/default.nix
index 591dc20..5ad0e0f 100644
--- a/nixosConfigurations/hetzner-vpn2/default.nix
+++ b/nixosConfigurations/hetzner-vpn2/default.nix
@@ -2,6 +2,7 @@
   imports = [
     ./hardware.nix
     ./nginx.nix
+    ./headscale.nix
   ];
 
   config = {
diff --git a/nixosConfigurations/hetzner-vpn2/headscale.nix b/nixosConfigurations/hetzner-vpn2/headscale.nix
new file mode 100644
index 0000000..538c557
--- /dev/null
+++ b/nixosConfigurations/hetzner-vpn2/headscale.nix
@@ -0,0 +1,26 @@
+let
+  headscale-port = 8668;
+in
+{
+  services = {
+    headscale = {
+      enable = true;
+      address = "localhost";
+      port = headscale-port;
+      settings = {
+        server_url = "https://headscale.zerforschen.plus";
+        dns = {
+          override_local_dns = false;
+          base_domain = "high-gravity.space";
+        };
+      };
+    };
+    nginx.virtualHosts."uplink.darkest.space" = {
+      addSSL = true;
+      enableACME = true;
+      locations = {
+        "/".proxyPass = "http://localhost:${builtins.toString headscale-port}";
+      };
+    };
+  };
+}