{
  config,
  lib,
  pkgs,
  myData,
  ...
}: {
  options.mj.services.tailscale = with lib.types; {
    enable = lib.mkEnableOption "Enable tailscale";
    # https://github.com/tailscale/tailscale/issues/1548
    silenceLogs = lib.mkOption {
      type = bool;
      default = false;
    };
  };

  config = with config.mj.services.tailscale;
    lib.mkIf enable ({
      services.tailscale.enable = true;
      networking.firewall.checkReversePath = "loose";
      networking.firewall.allowedUDPPorts = [41641];
    #}
    #// lib.mkIf silenceLogs {
    #  systemd.services.tailscaled.serviceConfig."StandardOutput" = "null";
    });
}