{
  services = {
    bitcoind."default" = {
      enable = true;
      prune = 100000;
    };

    monero = {
      enable = true;
      prune = true;
      rpc.restricted = true;
    };

    kubo.enable = true;

    tor.relay.onionServices."site".map = [
      4001
      8080
      8333
      18080
      18081
    ];

    caddy.virtualHosts = {
      "xmr.distrust.network".extraConfig = ''
        reverse_proxy localhost:18081
      '';
      "ipfs.distrust.network".extraConfig = ''
        reverse_proxy localhost:8080
      '';
    };
  };

  networking.firewall.allowedTCPPorts = [4001 8333 18080];
}