{config, ...}: let
  owner = config.customOps.owner;
  domain = config.customOps.domain.fqdn;
in {
  networking.hostName = "adonis";
  networking.firewall.logRefusedPackets = true;

  services.tor = {
    enable = true;
    openFirewall = true;
    enableGeoIP = false;
    torsocks.enable = true;
    client.enable = true;

    relay = {
      enable = true;
      role = "relay";
    };

    settings = {
      Nickname = "${owner}";
      ContactInfo = "admin.tor@${domain}";

      ExitRelay = false;

      MaxAdvertisedBandwidth = "100 MB";
      BandWidthRate = "100 MB";
      RelayBandwidthRate = "100 MB";
      RelayBandwidthBurst = "100 MB";

      CookieAuthentication = true;
      AvoidDiskWrites = 1;
      HardwareAccel = 0;
      SafeLogging = 1;
      NumCPUs = 4;

      ORPort = [9001];
    };
  };

  services.snowflake-proxy = {
    enable = true;
    capacity = 10;
  };
}