{ ... }:
{
  # FlareSolverr (Cloudflare / JS challenge solver for some indexers).
  # Typically used by Prowlarr as an HTTP proxy.
  #
  # UI/endpoint: http://<host>:8191
  services.flaresolverr.enable = true;

  networking.firewall.allowedTCPPorts = [ 8191 ];
}