{ ... }: {
  services.dnscrypt-proxy2 = {
    enable = true;
    settings = {
      # listen_addresses = [ "127.0.0.1:53" ];
      listen_addresses = [ "0.0.0.0:53" ];
      max_clients = 200;
      force_tcp = true;
      netprobe_address = "192.168.1.1:53";
      server_names = [ "libredns-noads" "njalla-doh" ];
    };
  };

  networking = {
    nameservers = [ "127.0.0.1" ];
  };
}