diff --git a/hosts/ude/default.nix b/hosts/ude/default.nix
index d395fbd..221aef7 100644
--- a/hosts/ude/default.nix
+++ b/hosts/ude/default.nix
@@ -26,7 +26,10 @@
       };
 
       settei.incus.enable = true;
-      virtualisation.podman.enable = true;
+      virtualisation.podman = {
+        enable = true;
+        defaultNetwork.settings.dns_enabled = true;
+      };
 
       services.nginx = {
         enable = true;
diff --git a/services/forgejo-runner.nix b/services/forgejo-runner.nix
index 99b71fc..6b636ca 100644
--- a/services/forgejo-runner.nix
+++ b/services/forgejo-runner.nix
@@ -25,6 +25,13 @@
             ];
           };
         };
+
+        virtualisation.podman = {
+          enable = true;
+          defaultNetwork.settings.dns_enabled = true;
+        };
+
+        networking.firewall.trustedInterfaces = [ "br-+" ];
       };
   };
 }