{ ... }:
{
  services.tor = {
    enable = true;

    settings = {
      Nickname = "vsm";
      ORPort = 9001;
      ExitRelay = false;
      SOCKSPort = 0;
      ControlSocket = null;
      ContactInfo = "admin@grzb.de";
      RelayBandwidthRate = "40 MBits";
      RelayBandwidthBurst = "50 Mbits";
      DirPort = 9030;
    };
  };
}