{
  networking.firewall.allowedTCPPorts = [ 53 ];
  networking.firewall.allowedUDPPorts = [ 53 ];

  services.adguardhome = {
    enable = true;
    settings = {
      users = [
        {
          name = "admin";
          password = "$2y$15$iPzjmUJPTwWUOsDp46GOPO/LYor/jDJjndwy2QlPddaKSD4QXvq9W";
        }
      ];
      dns = {
        bind_hosts = [ "127.0.0.1" "192.168.0.6" ]; # "192.168.2.1" ];
        port = 53;
        protection_enabled = true;
        filtering_enabled = true;
        upstream_dns = [ 
          "https://doh.tiar.app/dns-query"
          "tls://getdnsapi.net"
          "https://dns.adguard-dns.com/dns-query"
          "tls://dot.seby.io"
        ];
        use_http3_upstreams = true;
        rewrites = [
         {
          "domain" = "kopatz.ddns.net";
          "answer" = "192.168.0.6";
         }
         {
          "domain" = "server.home";
          "answer" = "192.168.0.6";
         }
         {
          "domain" = "server.local";
          "answer" = "192.168.0.6";
         }
        {
          "domain" = "adguard.local";
          "answer" = "192.168.0.6";
         }
	 {
	  "domain" = "nextcloud.local";
	  "answer" = "192.168.0.6";
	 }
	 {
	  "domain" = "turnserver.local";
	  "answer" = "192.168.2.1";
	 }
         {
          "domain" = "inverter.local";
          "answer" = "192.168.0.9";
         }
        ];  
      };
      querylog = {
        enabled = false;
      };
      filters = [
        {
          enabled = true;
          url = "https://adguardteam.github.io/HostlistsRegistry/assets/filter_1.txt";
          name = "adguard dns list";
          id = 1;
        }
        {
          enabled = true;
          url = "https://adguardteam.github.io/HostlistsRegistry/assets/filter_2.txt";
          name = "adguard block list";
          id = 2;
        }
        {
          enabled = true;
          url = "https://dbl.oisd.nl/";
          name = "big block list";
          id = 3;
        }
      ];
      dhcp = { enabled = false; };
      dhcpv6 = { enabled = false; };
      tls = {
        enabled = true;
      };
    };
  };
}