{ ... }:
{
  boot.initrd.availableKernelModules = [
    "hv_vmbus"
    "hv_storvsc"
  ];
  services.tailscale.extraDaemonFlags = [ "--encrypt-state=false" ];
  virtualisation.hypervGuest.enable = true;
}