diff --git a/targets/vpn/configuration.nix b/targets/vpn/configuration.nix
index 974a1f2..bea7373 100644
--- a/targets/vpn/configuration.nix
+++ b/targets/vpn/configuration.nix
@@ -27,6 +27,7 @@ in
     firewall = {
       allowedUDPPorts = [3478];
       allowedTCPPorts = [80 443];
+      checkReversePath = "loose";
     };
   };
 
@@ -94,5 +95,10 @@ in
     pkgs.hcloud
     pkgs.dhcpcd
   ];
+
+  boot.kernel.sysctl = {
+    "net.ipv4.ip_forward" = 1;
+    "net.ipv6.conf.all.forwarding" = 1;
+  };
 }