diff --git a/clusters/cl01tl/services/tailscale-operator/templates/proxy-class.yaml b/clusters/cl01tl/services/tailscale-operator/templates/proxy-class.yaml
new file mode 100644
index 000000000..b99720b23
--- /dev/null
+++ b/clusters/cl01tl/services/tailscale-operator/templates/proxy-class.yaml
@@ -0,0 +1,24 @@
+apiVersion: tailscale.com/v1alpha1
+kind: ProxyClass
+metadata:
+  name: default
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: default
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/version: {{ .Chart.AppVersion }}
+    app.kubernetes.io/component: proxy
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  metrics:
+    enable: true
+  statefulSet:
+    pod:
+      tailscaleContainer:
+        resources:
+          limits:
+            squat.ai/tun: "1"
+      tailscaleInitContainer:
+        resources:
+          limits:
+            squat.ai/tun: "1"
diff --git a/clusters/cl01tl/services/tailscale-operator/values.yaml b/clusters/cl01tl/services/tailscale-operator/values.yaml
index 982213d52..027f1ab6a 100644
--- a/clusters/cl01tl/services/tailscale-operator/values.yaml
+++ b/clusters/cl01tl/services/tailscale-operator/values.yaml
@@ -23,5 +23,6 @@ tailscale-operator:
       tag: v1.72.1
     defaultTags: "tag:k8s"
     firewallMode: auto
+    defaultProxyClass: "default"
   apiServerProxyConfig:
     mode: "false"