{
  services.adguardhome = {
    enable = true;
    openFirewall = true;
    settings = {
      dns = {
        port = 53;
        upstream_dns = [
          "1.1.1.1"
          "8.8.8.8"
        ];
      };
    };
  };
}