{ pkgs, ... }:

{
  networking.nameservers = [ "127.0.0.1" ];

  services.unbound.enable = true;

  systemd.services.doh-proxy = {
    after = [ "networking.target" ];
    wantedBy = [ "multi-user.target" ];
    script = "exec ${pkgs.doh-proxy}/bin/doh-httpproxy --port 4448";
  };
}