{ config, lib, pkgs, ... }:
{

  services.tailscale = {
    enable = true;
    authKeyFile = config.age.secrets.headscalePreAuthKey.path;
    extraUpFlags = [ "--login-server=https://head.${config.domain}" ];
    };
}