{ config, ... }: {
  config = {
    services.tailscale = {
      enable = true;
      authKeyFile = config.sops.secrets."tailscale/authKey".path;

      extraUpFlags = [
        "--hostname=${config.networking.hostName}"
      ];
    };

    sops.secrets."tailscale/authKey" = { };
  };
}