let
  domains = import ../domains.nix;
in
{ config, pkgs, ... }:

{
  services.tailscale = {
    enable = true;
    extraUpFlags = [
      "--login-server=https://${domains.tailscaleControlServer}/"
    ];
    # Only needed during activation.
    # authKeyFile = "/tmp/key-file";
  };
}