{ ... }: {
  services.tor = {
    enable = true;
    relay = {
      enable = true;
      role = "bridge";
    };
    settings = {
      ServerTransportListenAddr = "obfs4 0.0.0.0:4430";
      BridgeDistribution = "none";
    };
  };
}