let
  headscale-port = 8668;
in
{
  services = {
    headscale = {
      enable = true;
      address = "localhost";
      port = headscale-port;
      settings = {
        dns.base_domain = "high-gravity.space";
        server_url = "https://headscale.zerforschen.plus";
      };
    };
    nginx.virtualHosts."uplink.darkest.space" = {
      addSSL = true;
      enableACME = true;
      locations = {
        "/".proxyPass = "http://localhost:${builtins.toString headscale-port}";
      };
    };
  };
}