{ pkgs, ... }:
{
  services.openvscode-server = {
    enable = true;
    telemetryLevel = "off";
    port = 8542;
    host = "100.125.93.127"; # tailscale
    withoutConnectionToken = true;
    extraPackages = with pkgs; [
      nodejs
      git
      gh
      direnv
    ];
  };

  networking = {
    firewall = {
      allowedTCPPorts = [
        8542
        8543
        8544
        80
      ];
    };
  };
}