lib: {
  isTailscaleDomain = domain: domain |> lib.hasSuffix ".ts.net";
}