{config, ...}: {
  networking = {
    firewall.trustedInterfaces = [config.services.tailscale.interfaceName];
    hostId = "e6449321";
    networkmanager = {
      enable = true;
      wifi.backend = "iwd";
    };
    nftables.enable = true;
    wireless.iwd.enable = true;
  };
  services.openssh.enable = true;
}