{pkgs, config, hostname, ...}:  {
  # Enable networking with NM and automatically allow port 22 over Tailscale

  networking = {
    networkmanager = { 
      enable = true;
    };

    enableIPv6 = false;
    firewall = { 
      enable = true;
      allowedTCPPorts = [  ];
      allowedUDPPorts = [  ];
      interfaces.tailscale0.allowedTCPPorts = [ 22 ];
    };
  };
}