{config, ...}: {
  networking = {
    firewall.trustedInterfaces = [config.services.tailscale.interfaceName];
    hostId = "e6449321";
    networkmanager = {
      enable = true;
      wifi.backend = "iwd";
    };
    wireless.iwd.enable = true;
  };

  services = {
    openssh.enable = true;
    tailscale.useRoutingFeatures = "both";
  };
}