{ ... }: {
  boot.initrd.availableKernelModules = [ "hv_vmbus" "hv_storvsc" ];

  systemd.services.tailscaled.environment = {
    TS_ENCRYPT_STATE = "false";
  };

  virtualisation.hypervGuest.enable = true;
}