{pkgs, ...}: {
  environment.systemPackages = with pkgs; [
    k3s
  ];
  services.k3s = {
    enable = true;
    role = "server";
    extraFlags = toString [
      "--disable traefik"
      "--tls-san nc.tailc353f.ts.net"
      "--node-ip 100.67.112.98"
      "--advertise-address 100.67.112.98"
      "--node-external-ip 94.16.113.7"
    ];
  };
}