From 316dcc2c953c891c05727d3e89cd8d2a5b0cfb04 Mon Sep 17 00:00:00 2001
From: "Ricardo (XenGi) Band" <email@ricardo.band>
Date: Sat, 22 Aug 2026 15:19:57 +0200
Subject: [PATCH] fix dns

---
 hosts/forgejo-runner/podman.nix | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/hosts/forgejo-runner/podman.nix b/hosts/forgejo-runner/podman.nix
index ed956b1..c116012 100644
--- a/hosts/forgejo-runner/podman.nix
+++ b/hosts/forgejo-runner/podman.nix
@@ -1,7 +1,15 @@
 { ... }:
 
 {
-  boot.kernel.sysctl."net.ipv6.conf.all.forwarding" = true;
+  boot.kernel.sysctl = {
+    "net.ipv6.conf.all.forwarding" = true;
+    "net.ipv4.conf.all.forwarding" = true;
+  };
+
+  networking.firewall.interfaces.podman1 = {
+    allowedTCPPorts = [ 53 ];
+    allowedUDPPorts = [ 53 ];
+  };
 
   virtualisation.podman = {
     enable = true;