{
  services.tor = {
    enable = true;
    relay = {
      enable = true;
      role = "relay";
    };
    settings = {
      Nickname = "Distrust";
      ORPort = 9001;
    };
  };

  networking.firewall.allowedTCPPorts = [9001];
}