{ config, ... }:

{
  # exit nodes must be approved in admin interface
  # https://login.tailscale.com/admin/machines
  /* imports = [ ./tailscale-inner.nix ]; */

  # if host is _upgraded_ to exit node, reload with
  #     sudo systemctl start tailscaled-autoconnect
  # or maybe even
  #     sudo systemctl start tailscaled-set
  services.tailscale.useRoutingFeatures = "both";
  services.tailscale.extraSetFlags = [ "--advertise-exit-node" ];
  services.tailscale.extraUpFlags = [ "--advertise-exit-node" ];
}