{...}: {
  services.openssh = {
    enable = true;
    authorizedKeysFiles = ["%h/.local/ssh/authorized_keys"];
    settings = {
      PasswordAuthentication = false;
      PermitRootLogin = "no";
    };
  };
  services.samba = {
    enable = true;
    openFirewall = true;
    settings = {
      global = {
        "workgroup" = "WORKGROUP";
        "server string" = "komikan";
        "netbios name" = "komikan";
        "security" = "user";
        "use sendfile" = "yes";
        "hosts allow" = "192.168.0. 127.0.0.1 localhost 100.64.";
        "hosts deny" = "0.0.0.0/0";
      };
      pool = {
        "path" = "/mnt/pool";
        "browseable" = "no";
        "read only" = "no";
        "guest ok" = "no";
        "create mask" = "0644";
        "directory mask" = "0755";
        "force user" = "ahnwuoa";
        "force group" = "users";
      };
    };
  };
  services.tailscale.enable = true;
  services.qemuGuest.enable = true;
}