{ config, pkgs, lib, ... }:
{
  # system packages + services
  environment.systemPackages = with pkgs; [
    vim 
    wget
    fastfetch
    lsof
    btop
    git
    openssl
    stdenv
    gnumake
    parted
    zfs
    nixos-generators
    sqlite
  ];

  services.openssh.enable         = true;
  services.printing.enable        = true;
  services.tailscale.enable       = true;
  services.tailscale.useRoutingFeatures = "both";
  services.tailscale.authKeyFile = lib.mkIf (config ? age && config.age ? secrets) 
    config.age.secrets."headscale-authkey".path;
  services.tailscale.extraUpFlags = [
    "--login-server=https://headscale.nekomimi.pet"
  ];
}