{ hostname, username, desktop, tailscalekey, ... }: {
  imports = [
    ../../common/desktops/${desktop}
  ];

  networking.firewall.allowedTCPPorts = [ 3389 ];

  services.xrdp = {
    enable = true;
    openFirewall = true;
    defaultWindowManager = "xfce4-session";
  };
}