{
  services = {
    kubo.enable = true;
    tor.relay.onionServices."site".map = [
      4001
      8080
    ];
  };

  networking.firewall.allowedTCPPorts = [4001];
}