diff --git a/flake.lock b/flake.lock
index d620561..f6a3060 100644
--- a/flake.lock
+++ b/flake.lock
@@ -576,11 +576,11 @@
         "utils": "utils"
       },
       "locked": {
-        "lastModified": 1738235282,
-        "narHash": "sha256-UpKVpjZwlse6aFNuke9J0AvQtnDNs8yLZqoDd5W2WWw=",
+        "lastModified": 1738967312,
+        "narHash": "sha256-U8p5la0UDcrwYM7+DYWeFUcCjKIePQMXWV3nT9UaPvQ=",
         "ref": "refs/heads/main",
-        "rev": "b4eae5b0b39934e558dac957da7feaa5e21d183c",
-        "revCount": 21,
+        "rev": "72e0b07f71445b6f16942b2db1bd888ed587879b",
+        "revCount": 46,
         "type": "git",
         "url": "ssh://forgejo@git.everest.tailscale:4222/Toast/shows-api.git"
       },
diff --git a/roles/server/headscale.nix b/roles/server/headscale.nix
index dd4b0f6..c926c0b 100644
--- a/roles/server/headscale.nix
+++ b/roles/server/headscale.nix
@@ -1,4 +1,4 @@
-{...}: {
+{lib, ...}: {
   services.headscale = {
     enable = true;
     settings = {
@@ -20,5 +20,11 @@
     };
   };
   programs.rust-motd.settings.service_status.Headscale = "headscale";
-  systemd.services.tailscaled.after = ["headscale.service"];
+  systemd = {
+    services.tailscaled.after = ["headscale.service"];
+    services.headscale = {
+      serviceConfig.RestartSec = lib.mkForce "120s";
+      unitConfig.StartLimitBurst = lib.mkForce "infinity";
+    };
+  };
 }