{
  ## main networking
  networking.hostName = "talos";
  services.tailscale = {
    enable = true;
    permitCertUid = "caddy"; # allow caddy to get ssl certs from tailscale
  };

  ## adguard on
  services.adguardhome = {
    enable = true;
    mutableSettings = true;
  };

  ## caddy config
  ##services.caddy = {
  ##  enable = true;
  ##  virtualHosts = {
  ##    "talos.cobia-ghost.ts.net" = {
  ##      serverAliases = [ "talos" ];
  ##	listenAddresses = [ "100.64.0.0/10" ];
  ##	extraConfig = ''
  ##      handle /adguard/* {
  ##        reverse_proxy 127.0.0.1:8080
  ##      }

  ##      handle {
  ##        respond "Hello, world!"
  ##      }
  ##	'';
  ##    };
  ##  };
  ##};
}