{...}: {
  networking = {
    networkmanager.enable = true;
    nameservers = ["1.1.1.1"];
    firewall = {
      enable = true;
    };
  };
  environment.etc = {
    "resolv.conf".text = "nameserver 1.1.1.1\n";
  };

  services.tailscale = {
    enable = true;
  };
}