{
  services.headscale = {
    enable = true;
    port = 52812;
    settings = {
      server_url = "https://hs.technogothic.net";
      dns = {
        nameservers.global = [
          "94.140.14.14"
          "94.140.15.15"
        ]; # AdGuard Public DNS
        base_domain = "thorns.home.arpa";
      };
    };
  };
}