diff --git a/modules/services/forgejo.nix b/modules/services/forgejo.nix
index 98a4911..bab4501 100644
--- a/modules/services/forgejo.nix
+++ b/modules/services/forgejo.nix
@@ -98,6 +98,12 @@ in
       };
     };
 
+    # Allow containers to make DNS queries (https://www.reddit.com/r/NixOS/comments/199f16j/why_dont_my_podman_containers_have_internet_access/)
+    networking.firewall.interfaces.podman4 = {
+      allowedTCPPorts = [ 53 ];
+      allowedUDPPorts = [ 53 ];
+    };
+
     systemd.services = {
       nginx.wants = [ config.systemd.services.forgejo.name ];
     } // lib.optionalAttrs (!cfg.autostart) { forgejo.wantedBy = lib.mkForce [ ]; };