{
  config,
  inputs,
  pkgs,
  ...
}: let
  sopsFolder = builtins.toString inputs.nix-secrets + "/sops";
in {
  sops.secrets."tailscale-key" = {
    sopsFile = "${sopsFolder}/shared.yaml";
  };
  services.tailscale = {
    enable = true;
    package = pkgs.unstable.tailscale;
    authKeyFile = config.sops.secrets."tailscale-key".path;
  };
}