1{ ... }: {
 2  boot.initrd.availableKernelModules = [ "hv_vmbus" "hv_storvsc" ];
 3
 4  # since tailscale tries to use the TPM and we're sharing the same install
 5  # between Hyper-V and bare metal, we have to turn encryption off for tailscaled to work:
 6  systemd.services.tailscaled.environment = {
 7    TS_ENCRYPT_STATE = "false";
 8  };
 9
10  virtualisation.hypervGuest.enable = true;
11}