{config, ...}: {
  services = {
    headscale = with config.constants; {
      enable = true;
      address = localhost;
      port = port.headscale;
      settings = {
        dns = {
          base_domain = "tailscale.${domain}";
          override_local_dns = false;
        };
        server_url = "https://headscale.${domain}";
      };
    };
    tailscale = {
      enable = true;
      port = 27919;
      useRoutingFeatures = "both";
    };
  };
}