{ lib, config, ... }: let cfg = config.my.servers.adguardhome; in { options.my.servers.adguardhome.enable = lib.mkEnableOption "AdGuard Home DNS ad blocker"; config = lib.mkIf (cfg.enable && config.my.secureHost) { services.adguardhome = { inherit (cfg) enable; mutableSettings = true; }; }; }