{
  services = {
    bitcoind."default" = {
      enable = true;
      prune = 100000;
    };

    monero = {
      enable = true;
      prune = true;
      rpc.restricted = true;
    };

    kubo.enable = true;

    tor.relay.onionServices."site".map = [
      8333
      18080
      18081
      4001
    ];

    caddy.virtualHosts."xmr.distrust.network".extraConfig = ''
      reverse_proxy localhost:18081
    '';
  };

  networking.firewall.allowedTCPPorts = [8333 18080 4001];
}