{ ... }: {
  services.atuin = {
    enable = true;
    port = 8888;
    database.createLocally = true;
    openRegistration = true;
  };
  networking.firewall.interfaces.tailscale0.allowedTCPPorts = [ 8888 ];
}