{ config, pkgs, ... }:
{
  networking.firewall.interfaces.tailscale0.allowedTCPPorts = [ 8003 ];

  systemd.services.website = {
    wantedBy = [ "multi-user.target" ];
    description = "Development website preview";
    serviceConfig = {
      ExecStart = "${pkgs.static-web-server}/bin/static-web-server --host ${config.tailnetIPs.pinix} --port 8003 --root /var/www/website";
      Restart = "always";
    };
  };
}