{ config, ... }:

{
  # exit nodes must be approved in admin interface
  # https://login.tailscale.com/admin/machines
  imports = [ ./tailscale.nix ];

  # if host is _upgraded_ to exit node, reload with
  #     sudo systemctl start tailscaled-autoconnect
  # or maybe even
  #     sudo systemctl start tailscaled-set
  services.tailscale.useRoutingFeatures = "both";
  services.tailscale.extraSetFlags = [ "--advertise-exit-node" ];
}