{
  config,
  lib,
  pkgs,
  ...
}:
let
  inherit (lib) mkMerge optionalAttrs;
in
{
  config = mkMerge [
    {
      services.avahi.enable = true;
      services.openssh.enable = true;

      services.pipewire = {
        alsa.enable = true;
        alsa.support32Bit = true;
        pulse.enable = true;
        jack.enable = true;
      };

      services.resolved = {
        enable = true;
        dnssec = "true";
        domains = [ "~." ];
        fallbackDns = [
          "9.9.9.9#dns.quad9.net"
          "149.112.112.112#dns.quad9.net"
          "2620:fe::fe#dns.quad9.net"
          "2620:fe::9#dns.quad9.net"
        ];
        extraConfig = ''
          DNSOverTLS=yes
        '';
      };
    }
  ];
}