diff --git a/hosts/hedgedoc/default.nix b/hosts/hedgedoc/default.nix
index 419b7912..e2436e65 100644
--- a/hosts/hedgedoc/default.nix
+++ b/hosts/hedgedoc/default.nix
@@ -10,6 +10,12 @@
 
   microvm.mem = 1024;
 
+  boot.kernel.sysctl = {
+    # table overflow causing packets from nginx to hedgedoc to drop
+    # nf_conntrack: nf_conntrack: table full, dropping packet
+    "net.netfilter.nf_conntrack_max" = "32768";
+  };
+
   networking = {
     hostName = "hedgedoc";
     hosts = {