{ ... }: {
  services.tailscale = {
    enable = true;
    extraUpFlags = [ "--advertise-exit-node" ];
    port = 25555;
    useRoutingFeatures = "both";
  };
}