{
  den.aspects.dns = {
    nixos = { config, lib, ... }: {
      networking = {
        networkmanager = {
          enable = true;
          dns = lib.mkIf config.services.crab-hole.enable "none";
        };

        nameservers = if config.services.crab-hole.enable
          then [ "127.0.0.1" "::1" ]
          else [ "1.1.1.1" "1.0.0.1" ];
      };
    };
  };
}