{ config, ... }:
{
  services.blocky = {
    settings = {
      upstreams.groups.default = [
        "2606:4700:4700::1111"
        "2606:4700:4700::1001"
        "1.1.1.1"
        "1.0.0.1"
      ];
      blocking = {
        clientGroupsBlock.default = [
          "pro"
          "tif"
        ];
        denylists = {
          "pro" = [ "https://codeberg.org/hagezi/mirror2/raw/branch/main/dns-blocklists/wildcard/pro.txt" ];
          "tif" = [ "https://codeberg.org/hagezi/mirror2/raw/branch/main/dns-blocklists/wildcard/tif.txt" ];
        };
      };
      caching = {
        prefetching = true;
        minTime = "1m";
      };
    };
  };
}