diff --git a/tailscale/tailnet.yaml b/tailscale/tailnet.yaml
new file mode 100644
index 0000000..69f787a
--- /dev/null
+++ b/tailscale/tailnet.yaml
@@ -0,0 +1,13 @@
+apiVersion: tailscale.com/v1alpha1
+kind: Tailnet
+metadata:
+  name: talos-cluster
+  namespace: tailscale
+spec:
+  tagAdmin: true
+  dnsMode: SplitDNS
+  dnsDomains:
+  - tailscale.io
+  - k8s.khalisio.local
+  aclPolicyRef:
+    name: tailscale-acl-policy