{ config, lib, ... }:
with lib;
let
  cfg = config.eboskma.tailscale;
in
{
  options.eboskma.tailscale = { enable = mkEnableOption "tailscale"; };

  config = mkIf cfg.enable {
    services.tailscale = {
      enable = true;
    };

    systemd.services.tailscaled.environment = {
      TS_DEBUG_FIREWALL_MODE = "auto";
    };
  };
}