{ config, ... }:

let
  inherit (config.services.tailscale) interfaceName;
in

{
  imports = [ ./default.nix ];
  services.openssh.openFirewall = false;
  networking.firewall.interfaces.${interfaceName}.allowedTCPPorts = config.services.openssh.ports;
}