{...}: {
	services.sunshine = {
		enable = true;
		openFirewall = false;
		capSysAdmin = true;
	};

	networking.firewall.interfaces.tailscale0 = {
		allowedTCPPorts = [
			47984
			47989
			47990
		];
		allowedUDPPorts = [
			47998
			47999
			48000
			48002
		];
	};
}