{ config, lib, pkgs, ... }:

{
  imports = [ ../traefik/adguardhome.nix ];
  services.adguardhome = {
    enable = true;
    mutableSettings = false;
    settings = {
      http.address = "0.0.0.0:3001";
      dns = {
        bind_hosts = [ "127.0.0.1" "192.168.1.230" ];
        bootstrap_dns = [ "9.9.9.9" "149.112.112.10" ];
        ratelimit = 0;
        safe_search.enabled = true;
      };
    };
    openFirewall = true;
  };
  networking.firewall = {
    allowedTCPPorts = [ 53 ];
    allowedUDPPorts = [ 53 ];
  };
}