{
  services.tailscale = {
    enable = true;
    permitCertUid = "filippoberto95@gmail.com";
  };

  networking.firewall.checkReversePath = "loose";
}