{
  config,
  pkgs,
  outputs,
  constants,
  ...
}:

{
  imports = [
    outputs.nixosModules.tailscale
  ];

  services.tailscale = {
    enable = true;
    # Connect to our own headscale instance
    loginServer = "https://${constants.services.headscale.fqdn}";
    # Allow SSH access over Tailscale
    enableSSH = true;
    # Use MagicDNS names
    acceptDNS = true;
  };
}