tinc:
  configure: true
  name: firstroot
  connections: [hetzner]
  address:
    - fe80::10/64
    - 10.2.0.10/24
  listen_on: any
  extra_up:
    - sysctl -w net.ipv4.conf.${INTERFACE}.forwarding=1
    - sysctl -w net.ipv6.conf.${INTERFACE}.forwarding=1