{ pkgs, ... }:
let
  zonefile = builtins.toFile "obx.zone" (builtins.readFile ./obx.zone);
in {
  services.coredns = {
    enable = true;
    config = ''
      . {
          errors
          log . {
            class error
          }
          file ${zonefile} obx.
          cache 30 {
             disable success cluster.local
             disable denial cluster.local
          }
          header {
            response set ra
          }
          forward . 8.8.8.8 8.8.4.4
          loop
          reload
      }
    '';
  };
}