{ config, pkgs, ... }:
{
  services.tailscale = {
    enable = true;
    package = pkgs.unstable.tailscale;
    disableTaildrop = true;
    authKeyFile = config.age.secrets."odin/services/tailscale".path;
    extraSetFlags = [
      "--advertise-routes=192.168.178.0/24"
      "--advertise-exit-node"
    ];
    useRoutingFeatures = "server";
  };
}