{ pkgs, ... }:
{
  services.headscale = {
    enable = true;
    port = 52812;
    settings.server_url = "https://hs.technogothic.net";
    settings.dns_config = {
      nameservers = [
        "94.140.14.14"
        "94.140.15.15"
      ]; # AdGuard Public DNS
      base_domain = "thorns.home.arpa";
    };
  };
}