{config, pkgs, lib, ...}:
let
  tailUser = "server";
in {
  imports = [
    ../modules/headscale.nix
    ../modules/tailscale.nix
  ];
  services.headscale.ensureUsers = {
    "${tailUser}" = {};
  };
  services.tailscale = {
    enable = true;
    authTokenPath = config.services.headscale.ensureUsers."${tailUser}".path;
  };
  systemd.services.tailscale_autologin = {
    after = ["headscale-preauth-${tailUser}.service"];
  };
}