diff --git a/nixos/modules/services/networking/tailscale-derper.nix b/nixos/modules/services/networking/tailscale-derper.nix
index 9549cc5c6640..43a898465ef2 100644
--- a/nixos/modules/services/networking/tailscale-derper.nix
+++ b/nixos/modules/services/networking/tailscale-derper.nix
@@ -68,16 +68,10 @@ in
     services = {
       nginx = {
         enable = true;
-        upstreams.tailscale-derper = {
-          servers."127.0.0.1:${toString cfg.port}" = { };
-          extraConfig = ''
-            keepalive 64;
-          '';
-        };
         virtualHosts."${cfg.domain}" = {
           addSSL = true; # this cannot be forceSSL as derper sends some information over port 80, too.
           locations."/" = {
-            proxyPass = "http://tailscale-derper";
+            proxyPass = "http://127.0.0.1:${toString cfg.port}";
             proxyWebsockets = true;
             extraConfig = ''
               keepalive_timeout 0;