From 721f7b6aecfb35694151c9c0e610f895171d202b Mon Sep 17 00:00:00 2001
From: Isabella Bastaja <isabella@sorre.xyz>
Date: Sun, 31 May 2026 23:17:31 +0200
Subject: sagittarius: set up authoritative DNS server for sorre.internal

---
 hosts/sagittarius/network.nix | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'hosts/sagittarius/network.nix')

diff --git a/hosts/sagittarius/network.nix b/hosts/sagittarius/network.nix
index 32362e6..1b41783 100644
--- a/hosts/sagittarius/network.nix
+++ b/hosts/sagittarius/network.nix
@@ -47,6 +47,8 @@
               icmp type echo-request accept comment "allow ping"
               icmpv6 type != { nd-redirect, 139 } accept comment "Accept all ICMPv6 messages except redirects and node information queries (type 139).  See RFC 4890, section 4.4."
               ip6 daddr fe80::/64 udp dport 546 accept comment "DHCPv6 client"
+
+              udp dport 53 meta mark 42 accept comment "allow DNS over wireguard"
             }
         '';
       };
-- 
cgit v1.3.1