{config, ...}: {
  networking.nftables.enable = true;

  services.tailscale = {
    enable = true;
    port = config.constants.port.tailscale;
  };
}