{ config, ... }:

{
  networking = {
    firewall.trustedInterfaces = [ config.services.tailscale.interfaceName ];
    hostId = "3ddd2ad2";
    nftables.enable = true;
  };
  services.openssh.enable = true;
}