{...}: {
  services.adguardhome = {
    enable = true;
    mutableSettings = true;
    settings.bind_port = 3001;
    openFirewall = true;
  };
  networking.firewall = {
    allowedTCPPorts = [53];
    allowedUDPPorts = [53];
  };
}