{
  services.dante = {
    enable = true;
    config = ''
      internal: 0.0.0.0 port=1080
      external: eth0
      clientmethod: none
      socksmethod: none
    '';
  };

  networking.firewall.allowedTCPPorts = [ 1080 ];
  networking.firewall.allowedUDPPorts = [ 1080 ];
}