{ globals, nixpkgs, nglib, ... }:
nglib.makeSystem {
  inherit nixpkgs;
  system = "x86_64-linux";
  name = "nixng-dnsmasq";

  config = { ... }: {
    dumb-init = {
      enable = true;
      type.services = { };
    };

    init.services.dnsmasq = {
      shutdownOnExit = true;
    };

    services.dnsmasq = {
      enable = true;

      settings = {
        address = [
          "/kms.kun.is/${globals.kmsIPv4}"
          "/ssh.git.kun.is/${globals.gitIPv4}"
        ];

        alias = "${globals.routerPublicIPv4},${globals.traefikIPv4}";
        expand-hosts = true;
        local = "/dmz/";
        log-queries = true;
        no-hosts = true;
        no-resolv = true;
        port = 53;

        server = [
          "192.168.30.1"
          "/kun.is/${globals.bind9IPv4}"
        ];
      };
    };
  };
}