{ ... }:
{
  services.tailscale = {
    enable = true;
    openFirewall = true;
    disableTaildrop = true;
  };

  services.unbound.settings = {
    server.domain-insecure = "aristote.mesh";
    forward-zone = {
      name = "aristote.mesh.";
      forward-addr = "100.100.100.100";
    };
  };
}