{
  config,
  pkgs,
  inputs,
  system,
  ...
}: {
  services.resolved = {
    # Disable local DNS stub listener on 127.0.0.53
    extraConfig = ''
      DNSStubListener=no
    '';
  };
  services.technitium-dns-server = {
    enable = true;
    openFirewall = true;
  };
}