{...}:
{
  config = {
    fileSystems."/var/lib/knot" =
      { device = "surtr/safe/var-lib-knot";
        fsType = "zfs";
      };
    
    services.knot = {
      enable = true;
      extraConfig = ''
        server:
          listen: 0.0.0.0@53
          listen: ::@53

        zone:
          - domain: yggdrasil.li
            file: ${./zones/li.yggdrasil.soa}
            semantic-checks: on
      '';
    };
  };
}