{ ... }:

{
  services.bind = {
    enable = true;
    forwarders = [ "8.8.8.8" "1.1.1.1" ];
    cacheNetworks = [ "127.0.0.0/8" "192.168.0.0/24" ];
    extraConfig = "";
    extraOptions = ''
      dnssec-validation auto;
    '';
  };

  #networking.extraHosts = ''
  #  192.168.0.1     router.home
  #  192.168.0.196   lithium.home
  #'';

}