nix-config/modules/network/tailscale.nix

{
  flake.modules.nixos.tailscale = {
    services.tailscale = {
      enable = true;
      extraSetFlags = [
        "--accept-dns"
        "--accept-routes"
        "--ssh"
      ];
    };
  };
}