From 399cbee22a62ebf592e327d3023e93becab48540 Mon Sep 17 00:00:00 2001
From: SebastianStork <git@sstork.dev>
Date: Mon, 2 Mar 2026 00:08:01 +0100
Subject: [PATCH] nameservers/public: Open port 53

---
 modules/nixos/services/nameservers/public.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/modules/nixos/services/nameservers/public.nix b/modules/nixos/services/nameservers/public.nix
index 0841d75..2718038 100644
--- a/modules/nixos/services/nameservers/public.nix
+++ b/modules/nixos/services/nameservers/public.nix
@@ -73,6 +73,11 @@ in
   };
 
   config = lib.mkIf cfg.enable {
+    networking.firewall = {
+      allowedTCPPorts = [ 53 ];
+      allowedUDPPorts = [ 53 ];
+    };
+
     services.nsd = {
       enable = true;
       interfaces = [ netCfg.underlay.interface ];