From fb2d3a1ff765c7e262ca8f3f783bcea0eed5bc1f Mon Sep 17 00:00:00 2001
From: rope <fredrik@nordhammer.it>
Date: Thu, 21 May 2026 14:34:11 +0100
Subject: [PATCH] adguard: bind DNS to LAN + loopback only to avoid podman
 conflict

Binding to 0.0.0.0 claimed port 53 on podman bridge interfaces,
preventing aardvark-dns from starting and breaking Forgejo Actions.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 services/adguard.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/services/adguard.nix b/services/adguard.nix
index e59882a..c1e64a4 100644
--- a/services/adguard.nix
+++ b/services/adguard.nix
@@ -12,7 +12,7 @@
       mutableSettings = false;
       settings = {
         dns = {
-          bind_hosts = [ "0.0.0.0" ];
+          bind_hosts = [ "10.0.0.1" "127.0.0.1" ];
           port = 53;
           # Query all upstreams in parallel; take the fastest response
           upstream_mode = "parallel";