{...}: {
  services.monero = {
    enable = true;
    rpc = {
      address = "0.0.0.0";
      restricted = true;
    };
    extraConfig = ''
      prune-blockchain=1
      confirm-external-bind=1
      out-peers=8
      in-peers=16
      zmq-pub=tcp://localhost:18083
      add-priority-node=p2pmd.xmrvsbeast.com:18080
      add-priority-node=nodes.hashvault.pro:18080
      enable-dns-blocklist=1
      enforce-dns-checkpointing=1
    '';
  };
}