{ pkgs, config, ... }:
{
  networking = {
    useDHCP = true;
    firewall = {
      trustedInterfaces = [ "tailscale0" ];
      allowedUDPPorts = [ config.services.tailscale.port ];
    };
    search = [
      # Tailscale
      "tail4c593.ts.net"
      "infinidoge.github.beta.tailscale.net"
    ];
    nameservers = [
      # Tailscale
      "100.100.100.100"

      # Google Public DNS
      "8.8.8.8"
      "8.8.4.4"
      "2001:4860:4860::8888"
      "2001:4860:4860::8844"

      # Cloudflare Public DNS
      "1.1.1.1"
      "1.0.0.1"
      "2696:4700:4700::1111"
      "2696:4700:4700::1111"
    ];
  };

  services = {
    avahi = {
      enable = true;
      nssmdns = true;
      publish = {
        enable = true;
        userServices = true;
      };
      extraServiceFiles = {
        ssh = "${pkgs.avahi}/etc/avahi/services/ssh.service";
      };
    };

    tailscale = {
      enable = true;
      useRoutingFeatures = if config.info.stationary then "both" else "client";
    };
  };
}