{globals, ...}: {
  dinit.enable = true;
  init.services.dnsmasq.shutdownOnExit = true;

  services.dnsmasq = {
    enable = true;

    settings = {
      address = [
        "/kms.kun.is/${globals.kmsIPv4}"
        "/ssh.git.kun.is/${globals.gitIPv4}"
      ];

      alias = "${globals.routerPublicIPv4},${globals.traefikIPv4}";
      expand-hosts = true;
      local = "/dmz/";
      log-queries = true;
      no-hosts = true;
      no-resolv = true;
      port = 53;

      server = [
        "192.168.30.1"
        "/kun.is/${globals.bind9IPv4}"
      ];
    };
  };
}