{lib, ...}: {
  services.tor = {
    settings.HiddenServiceNonAnonymousMode = false;
    client = {
      enable = true;
      dns.enable = true;
    };
  };
}