{
  config,
  ...
}:
{
  config = {
    services.adguardhome = {
      enable = true;
      port = 3001;
      openFirewall = true;
      settings = {
        http = {
          address = "0.0.0.0:3000";
        };
        auth_attempts = 5;
        block_auth_min = 10;
        dns = {
          bind_hosts = [ "0.0.0.0" ];
          port = 53;
          upstream_mode = "load_balance";
          upstream_dns_file = config.age.secrets.adguard-dns-list.path;
        };
        clients = {
          persistent = [
            {
              ids = [ "100.64.0.1" ];
              name = "brontes";
              tags = [ "device_pc" ];
            }
            {
              ids = [ "100.64.0.2" ];
              name = "oneplus9";
              tags = [ "device_phone" ];
            }
            {
              ids = [ "100.64.0.5" ];
              name = "marr";
              tags = [ "device_laptop" ];
            }
            {
              ids = [ "100.64.0.4" ];
              name = "shan";
              tags = [ "device_pc" ];
            }
          ];
        };
      };
    };
  };
}