{ ... }:

{
  services.blocky = {
    enable = true;
    settings = {
      upstreams.groups.default = [
        "1.1.1.1" "1.0.0.1"
        "2606:4700:4700::1111" "2606:4700:4700::1001"
      ];
      blocking = {
        blackLists.ads = [
          # https://jasonpearce.com/2020/09/16/how-to-disable-ads-on-the-roku-home-screen/
          "https://www.github.developerdan.com/hosts/lists/ads-and-tracking-extended.txt"
        ];
        clientGroupsBlock.default = [ "ads" ];
      };
    };
  };

  networking.firewall.allowedUDPPorts = [ 53 ];
}