{config, ...}: {
  services.headscale = with config.constants; {
    enable = true;
    address = localhost;
    port = port.headscale;
    settings = {
      dns = {
        base_domain = "tailscale.${domain}";
        override_local_dns = false;
      };
      server_url = "https://headscale.${domain}";
    };
  };
}