{pkgs, lib, config, ...}:
let inherit (config.services) nsd;
in
{
  imports = [
    nsd/sourcephile.nix
  ];
  config = {
    services.nsd = {
      enable = true;
      ipv4 = true;
      ipv6 = true;
      verbosity = 5;
      # SEE: http://www.nlnetlabs.nl/blog/2012/10/11/nsd-ratelimit/
      ratelimit.size = 10000;
      extraConfig = ''
      '';
      interfaces = lib.unique [
        "127.0.0.1"
        "::1"
        config.networking.zones.lan.ipv4
        config.networking.zones.net.ipv4
      ];
    };
  };
}