{ lib, pkgs, ... }:
{
  networking.networkmanager.dns = "dnsmasq";

  environment.etc."NetworkManager/dnsmasq.d/10-bind-interfaces.conf".source =
    (pkgs.formats.keyValue {
      mkKeyValue =
        name: value:
        if value == true then
          name
        else if value == false then
          ""
        else
          lib.generators.mkKeyValueDefault { } "=" name value;
      listsAsDuplicateKeys = true;
    }).generate
      "10-bind-interfaces.conf"
      {
        bind-interfaces = true;
        listen-address = [ "127.0.0.1" ];
      };
}