{ config, lib, pkgs, ... }: { services.tailscale = { enable = true; openFirewall = true; useRoutingFeatures = "client"; }; }