diff --git a/hosts/servers/alexandria/security.nix b/hosts/servers/alexandria/security.nix
index 1add949..975dfc6 100644
--- a/hosts/servers/alexandria/security.nix
+++ b/hosts/servers/alexandria/security.nix
@@ -19,4 +19,9 @@
       extraDomainNames = [ "*.baduhai.me" ];
     };
   };
+
+  boot.kernel.sysctl = {
+    "net.ipv4.ip_forward" = 1;
+    "net.ipv6.conf.all.forwarding" = 1;
+  };
 }