{ config, lib, pkgs, ... }:

{
  services.tinydns = {
    enable = true;
    data = ''
      .internal.deertopia.net:192.168.68.79:dns:86400
      =*.internal.deertopia.net:192.168.68.79:86400
      =internal.deertopia.net:192.168.68.79:86400

      # Redirect everything else to the router's nameservers.
      &.::192.168.68.1:86400
    '';
  };

  networking.firewall.allowedUDPPorts = [
    53
  ];

  networking.nameservers = [ "192.168.68.79" ];
}