{pkgs-unstable, ...}: {
  services.tailscale = {
    package = pkgs-unstable.tailscale;
    enable = true;
    extraSetFlags = [ "--ssh" ];
    extraDaemonFlags = [ "--no-logs-no-support" ];
  };
}