diff --git a/hosts/modules/roles/work/tailscale.nix b/hosts/modules/roles/work/tailscale.nix
index 108c5193b..1f0851660 100644
--- a/hosts/modules/roles/work/tailscale.nix
+++ b/hosts/modules/roles/work/tailscale.nix
@@ -127,13 +127,13 @@ in
           sleep 2
         done
         for addr in ${lib.concatStringsSep " " routableSubnets}; do
-          ${ip} route add table main "$addr" dev tailscale0 scope global
+          (set -x ; ${ip} route add table main "$addr" dev tailscale0 scope global)
         done
       '')
     ];
     systemd.services.tailscaled.preStop = ''
       for addr in ${lib.concatStringsSep " " routableSubnets}; do
-        ${ip} route del table main "$addr" dev tailscale0 scope global || true
+        (set -x ; ${ip} route del table main "$addr" dev tailscale0 scope global) || true
       done
     '';
     # systemd.network.networks."50-tailscale" = {