{ pkgs, config, ... }: {
	networking.nameservers = [ "192.168.77.2" ];

	# Router container
	containers.dnsdhcp = {
		autoStart = true;
		ephemeral = true;
		privateNetwork = true;
		hostBridge = "br-lan1";
		#hostBridge = "br-lan1";
		#localMacAddress = "02:00:00:00:77:01";

		config = { lib, config, ... }: {
			imports = [
				../../nixos/services/router
				#./router-hosts.nix  # Contains dhcp config + static leases + overrides
				./dns-overrides.nix
			];

			# Network
			networking = {
				enableIPv6 = false;
				defaultGateway = "192.168.77.1";
				interfaces.eth0.ipv4.addresses = [{
					address = "192.168.77.2";
					prefixLength = 24;
				}];
				firewall = {
					# DNS+DHCP ports
					allowedTCPPorts = [ 53 ];
					allowedUDPPorts = [ 53 67 ];
				};
			};

			# Setup dns server
			services._router = {
				dnsDhcpConfig = {
					enable = true;
					#localResolution = {
					#	localDomain = "pls.lan";
					#	localDnsAddress = "192.168.77.1@53";
					#	localReverseZone = "77.168.192.in-addr.arpa";
					#};
				};
				routing.enable = false;
			};

			services.unbound._blocklists = {
				enable = true;
				hageziBlocklists = [ "pro" "nsfw" ];
			};

			system.stateVersion = "26.05";
		};
	};
}