_: {
  networking.nftables.enable = true;
  services.tailscale.enable = true;
}