{ config, pkgs, ... }:

{
  networking = {
    networkmanager = {
      enable = true;
      # Does currently not work...
      #enableFccUnlock = true;
    };
    useDHCP = false;
    hostName = "ochsenchopf";
  };

  services.tailscale = {
    enable = true;
    openFirewall = true;
    useRoutingFeatures = "client";
    authKeyFile = "/secrets/wireguard/tailscale-key";
    extraUpFlags = [
      "--operator"
      "fhauser"
      "--accept-routes"
      "--exit-node=100.64.0.5"
      "--login-server=https://vpn.qo.is"
    ];
  };
}