diff --git a/.tangled/workflows/build.yml b/.tangled/workflows/build.yml
index 7abf0a9e..971ea6b3 100644
--- a/.tangled/workflows/build.yml
+++ b/.tangled/workflows/build.yml
@@ -33,11 +33,16 @@ steps:
       set -euo pipefail
 
       mkdir -p /var/run/tailscale
-      tailscaled --state=mem: --socket=/var/run/tailscale/tailscaled.sock &
+      tailscaled --state=mem: --socket=/var/run/tailscale/tailscaled.sock \
+        --tun=userspace-networking \
+        --socks5-server=localhost:1055 \
+        --outbound-http-proxy-listen=localhost:1055 &
       until tailscale status --socket=/var/run/tailscale/tailscaled.sock >/dev/null 2>&1; do sleep 0.5; done
 
       tailscale --socket=/var/run/tailscale/tailscaled.sock up --auth-key "$TAILSCALE_AUTHKEY"
 
+      export HTTP_PROXY="http://localhost:1055" HTTPS_PROXY="http://localhost:1055"
+
       payload=$(jq -nc \
         --arg actor "${GITHUB_ACTOR:-unknown}" \
         --arg ref "${TANGLED_REF:-unknown}" \