diff --git a/hosts/forgejo-runner/podman.nix b/hosts/forgejo-runner/podman.nix
index ed956b1..c116012 100644
--- a/hosts/forgejo-runner/podman.nix
+++ b/hosts/forgejo-runner/podman.nix
@@ -1,7 +1,15 @@
 { ... }:
 
 {
-  boot.kernel.sysctl."net.ipv6.conf.all.forwarding" = true;
+  boot.kernel.sysctl = {
+    "net.ipv6.conf.all.forwarding" = true;
+    "net.ipv4.conf.all.forwarding" = true;
+  };
+
+  networking.firewall.interfaces.podman1 = {
+    allowedTCPPorts = [ 53 ];
+    allowedUDPPorts = [ 53 ];
+  };
 
   virtualisation.podman = {
     enable = true;