{ pkgs }:
let
  configFiles = {
    config = ''
      FWTYPE=iptables

      SET_MAXELEM=522288

      IPSET_OPT="hashsize 262144 maxelem $SET_MAXELEM"

      IP2NET_OPT4="--prefix-length=22-30 --v4-threshold=3/4"
      IP2NET_OPT6="--prefix-length=56-64 --v6-threshold=5"

      AUTOHOSTLIST_INCOMING_MAXSEQ=4096
      AUTOHOSTLIST_RETRANS_MAXSEQ=32768
      AUTOHOSTLIST_RETRANS_RESET=1
      AUTOHOSTLIST_RETRANS_THRESHOLD=3
      AUTOHOSTLIST_FAIL_THRESHOLD=3
      AUTOHOSTLIST_FAIL_TIME=60
      AUTOHOSTLIST_UDP_IN=1
      AUTOHOSTLIST_UDP_OUT=4
      AUTOHOSTLIST_DEBUGLOG=0

      MDIG_THREADS=30

      GZIP_LISTS=1

      DESYNC_MARK=0x40000000
      DESYNC_MARK_POSTNAT=0x20000000

      NFQWS2_ENABLE=1
      NFQWS2_PORTS_TCP=80,443
      NFQWS2_PORTS_UDP=443
      NFQWS2_TCP_PKT_OUT=20
      NFQWS2_TCP_PKT_IN=10
      NFQWS2_UDP_PKT_OUT=5
      NFQWS2_UDP_PKT_IN=3
      NFQWS2_OPT="
      --filter-tcp=80 --filter-l7=http --payload http_req --lua-desync=tcpseg:pos=0,midsld:ip_id=rnd:repeats=1 --new
      --filter-tcp=443 --filter-l7=tls --payload=tls_client_hello --hostlist-domains=x.com --lua-desync=hostfakesplit:nofake1:midhost=midsld:ip_ttl=6:repeats=1 --new
      --filter-tcp=443 --filter-l7=tls --payload=tls_client_hello --lua-desync=tcpseg:pos=0,midsld:ip_id=rnd:repeats=1 --new
      --filter-udp=443 --filter-l7=quic --payload=quic_initial --lua-desync=tcpseg:pos=0,midsld:ip_id=rnd:repeats=1
      "

      MODE_FILTER=none

      FLOWOFFLOAD=donttouch

      INIT_APPLY_FW=1

      DISABLE_IPV6=1

      FILTER_TTL_EXPIRED_ICMP=1
    '';
  };

in
pkgs.lib.mapAttrs (name: content: pkgs.writeText name content) configFiles