diff --git a/machines/valkyrie/configuration.nix b/machines/valkyrie/configuration.nix
index 00a3828..34d1ee8 100644
--- a/machines/valkyrie/configuration.nix
+++ b/machines/valkyrie/configuration.nix
@@ -43,7 +43,13 @@
     useNetworkd = true;
     nftables.enable = true;
 
-    firewall.trustedInterfaces = [ "tailscale0" ];
+    firewall = {
+      trustedInterfaces = [ "tailscale0" ];
+      allowedUDPPorts = [
+        53
+        67
+      ];
+    };
   };
 
   systemd.network = {