{ ... }:

{
  networking.nameservers = [ "127.0.0.1" ];

  services.unbound.enable = true;
}