gistfile1.txt

{
  services.technitium-dns-server = {
    enable = true;
    openFirewall = true;
  };

  systemd.services.technitium-dns-server.serviceConfig = {
    WorkingDirectory = lib.mkForce null;
    BindPaths = lib.mkForce null;
  };

  networking.firewall = {
    enable = true;
    allowedTCPPorts = [ 53 5380 ];
    allowedUDPPorts = [ 53 ];
    interfaces.podman0.allowedUDPPorts = [ 53 ];
  };
}