Authoritative and recursive DNS servers. Authoritative listens on 5300 (with a router NATing it for public access), and recursive listens on 53.
There is also a powerdns admin interface on port 8000. Currently you need to SSH tunnel into use it, and sometimes it doesn't notify after updating using the admin interface.
Managed declaratively through Nix.