{config, pkgs, lib, ...}:

{
  services.unbound = {
    enable = false;

    settings = {
      server = {
        interface = [
          "0.0.0.0" "::"
        ];
        private-address = "192.168.1.0/24";
        access-control = [
          "127.0.0.0/8 allow"
          "192.168.1.0/24 allow"
        ];
      };
      forward-zone = [
        {
          name = ".";
          forward-addr = [
            "1.1.1.1"
            "1.0.0.1"
            "8.8.8.8"
            "8.8.4.4"
          ];
        }
      ];
    };
  };
}