{ config, pkgs, ... }:
{
  services.bind = {
    enable = true;
    cacheNetworks = [
      "127.0.0.0/24"
      "::1/128"
      "localhost"
      "localnets"
    ];

    zones = {
      "encryptionin.space" = {
        name = "encryptionin.space";
        master = false;
        file = "db.encryptionin.space";
        masters = [ "92.51.163.43" ];
      };
      "queerscriptors.org" = {
        name = "queerscriptors.org";
        master = false;
        file = "db.queerscriptors.org";
        masters = [ "92.51.163.43" ];
      };
    };
  };
  networking.firewall.allowedUDPPorts = [ 53 ];
}