{
  globals,
  nixpkgs,
  nglib,
  ...
}:
nglib.makeSystem {
  inherit nixpkgs;
  system = "x86_64-linux";
  name = "nixng-dnsmasq";

  config = {...}: {
    dinit.enable = true;
    init.services.dnsmasq.shutdownOnExit = true;

    services.dnsmasq = {
      enable = true;

      settings = {
        address = [
          "/kms.kun.is/${globals.kmsIPv4}"
          "/ssh.git.kun.is/${globals.gitIPv4}"
        ];

        alias = "${globals.routerPublicIPv4},${globals.traefikIPv4}";
        expand-hosts = true;
        local = "/dmz/";
        log-queries = true;
        no-hosts = true;
        no-resolv = true;
        port = 53;

        server = [
          "192.168.30.1"
          "/kun.is/${globals.bind9IPv4}"
        ];
      };
    };
  };
}