{...}: {
  services.headscale = {
    enable = true;
    settings = {
      server_url = "https://headscale.toast003.xyz";
      ip_prefixes = [
        "100.100.0.0/16"
      ];
      dns_config = {
        base_domain = "tailscale";
        nameservers = ["9.9.9.9"];
        override_local_dns = true;
      };
    };
  };
  services.caddy = {
    virtualHosts.headscale = {
      hostName = "headscale.toast003.xyz";
      extraConfig = ''
        reverse_proxy localhost:8080
      '';
    };
  };
}