diff --git a/CHANGELOG.md b/CHANGELOG.md
index 42247241..1bccf9ef 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -19,6 +19,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
 * evolinux-base: Add non-free repos & install non-free firmware on dedicated hardware
 * generate-ldif: Add services check for bkctld
 * minifirewall: upstream release 22.03.4
+* minifirewall: tail template follows symlinks
 * openvpn: use a subnet topology instead of the net30 default topology
 
 ### Fixed
diff --git a/minifirewall/tasks/tail.yml b/minifirewall/tasks/tail.yml
index 199b4c7a..a1bfba64 100644
--- a/minifirewall/tasks/tail.yml
+++ b/minifirewall/tasks/tail.yml
@@ -4,6 +4,7 @@
     src: "{{ item }}"
     dest: "/etc/minifirewall.d/{{ minifirewall_tail_file }}"
     force: "{{ minifirewall_tail_force | bool }}"
+    follow: yes
   loop: "{{ query('first_found', templates) }}"
   vars:
     templates: