{ pkgs, config, ... }:
{

  tinc.private.enable = true;
  tinc.private.ipv4 = "10.23.42.28";

  healthchecks.localCommands.ping-private = pkgs.writers.writeBash "ping-private" ''
    ping -c 1 -W 5 ${config.tinc.private.ipv4}
  '';

}