diff --git a/configs/tailnet.nix b/configs/tailnet.nix
index 3e04b39..2611c8a 100644
--- a/configs/tailnet.nix
+++ b/configs/tailnet.nix
@@ -84,7 +84,7 @@ let
           {
             # ollama
             "action" = "accept";
-            "src" = [ "europa" "h" ];
+            "src" = [ "europa" "h" "tag:work" ];
             "dst" = [ "ollama:443" ];
             "proto" = "tcp";
           }