{ inputs, config, ... }:

{
  imports = [ inputs.synix.nixosModules.tailscale ];

  services.tailscale = {
    enable = true;
    tailnets = {
      personal = {
        default = true;
        loginServer = "https://hs.sid.ovh";
        authKeyFile = config.sops.secrets."tailscale/personal-key".path;
        enableSSH = true;
        acceptDNS = true;
      };
    };
  };

  sops.secrets."tailscale/personal-key" = { };
}