{config, ...}: {
  services = {
    headscale = with config.constants; {
      enable = true;
      address = localhost;
      port = port.headscale;
      settings.server_url = "https://headscale.${domain}";
    };
    tailscale = {
      enable = true;
      port = 27919;
      useRoutingFeatures = "both";
    };
  };
}