{
  services.adguardhome = {
    enable = true;
    host = "0.0.0.0";
    port = 2500;
    openFirewall = false;
    mutableSettings = true;
    settings = {
      dns= {
        parental_enabled = false;
        safesearch_enabled = false;
        safebrowsing_enabled = false;
        upstream_dns = [
          "45.11.45.11"
          "1.1.1.1"
          "9.9.9.9"
          "149.112.112.112"
        ];
      };
      tls = {
        enabled = true;
        force_https = true;
      };
      filters = [
        {
          enabled = true;
          url = "https://raw.githubusercontent.com/DandelionSprout/adfilt/master/LegitimateURLShortener.txt";
          name = "Actually Legitimate URL Shortener Tool";
        }
        {
          enabled = true;
          url = "https://filters.adtidy.org/extension/ublock/filters/14_optimized.txt";
          name = "Adguard Annoyances";
        }
        {
          enabled = true;
          url = "https://raw.githubusercontent.com/AdguardTeam/FiltersRegistry/master/filters/filter_15_DnsFilter/filter.txt";
          name = "Adguard DNS";
        }
      ];
    };
  };
}