From f35d104f84c3edab3e636b2633e7048eccf6fdd6 Mon Sep 17 00:00:00 2001
From: LavaDesu <me@lava.moe>
Date: Thu, 22 May 2025 23:38:50 +1000
Subject: [PATCH] services/unbound: allow wireguard clients

---
 modules/services/unbound.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/services/unbound.nix b/modules/services/unbound.nix
index 62732c9..e6ec4ad 100644
--- a/modules/services/unbound.nix
+++ b/modules/services/unbound.nix
@@ -34,6 +34,7 @@ in {
           "127.0.0.1/8      allow"
           "10.0.0.0/8       allow"
           "192.168.100.0/24 allow"
+          "fd0d::/16 allow"
           "${gcSecrets.wireguard.ipv6Subnet}:/80 allow"
         ];
         domain-insecure = [ "\"local.lava.moe\"" ];