diff --git a/hosts/lillyserver/systemd.nix b/hosts/lillyserver/systemd.nix
index a6a211b..7836b22 100644
--- a/hosts/lillyserver/systemd.nix
+++ b/hosts/lillyserver/systemd.nix
@@ -1,6 +1,11 @@
+{ pkgs, ... }:
+let
+  crowdsecservice = "crowdsec-prefix";
+  tailscale-cloudflare-dns-sync-service = "tailscale-cloudflare-dns-sync";
+in
 {
   systemd.services = {
-    crowdsec-prefix = {
+    ${crowdsecservice} = {
       enable = true;
       description = "Get IPv6 Prefix to add to Crowdsec Whitelist";
       serviceConfig = {
@@ -9,9 +14,17 @@
         WorkingDirectory = "/mnt/lilly-ssd/appdata/crowdsec/crowdsec-prefix-change-script";
       };
     };
+    ${tailscale-cloudflare-dns-sync-service} = {
+      enable = true;
+      description = "Start the tailscale-cloudflare-dns-sync Docker container";
+      serviceConfig = {
+        Type = "oneshot";
+        ExecStart = "${pkgs.docker}/bin/docker start tailscale-cloudflare-dns-sync";
+      };
+    };
   };
   systemd.timers = {
-    crowdsec-prefix = {
+    ${crowdsecservice} = {
       enable = true;
       description = "Run Crowdsec-Prefix check regularly.";
       timerConfig = {