{ config, lib, ... }:

{
  networking = {
    useDHCP = lib.mkDefault true;
    nftables.enable = true;
    firewall = {
      enable = true;
      trustedInterfaces = [ "tailscale0" ];
      allowedUDPPorts = [ config.services.tailscale.port ];
    };
  };
  systemd = { 
    network.wait-online.enable = false;
    services.tailscaled.serviceConfig.Environment = [
      "TS_DEBUG_FIREWALL_MODE=nftables"
    ];
  };
  boot.initrd.systemd.network.wait-online.enable = false;
}