{ config, pkgs, ... }: { services.tailscale = { enable = true; # MANUAL: run tailscale up --login-server https:/// }; }