~

nixos/docker/pihole/default.nix

@@ -37,6 +37,7 @@ in with lib; {
 
 			networking.firewall = mkIf cfg.openFirewall {
 				allowedTCPPorts = [ 53 cfg.listenPortHTTP cfg.listenPortHTTPS ];
+				allowedUDPPorts = [ 53 67 ];
 			};
 		}
 	]);

nixos/docker/pihole/docker-compose.nix

@@ -21,6 +21,7 @@
     ports = [
       "53:53/tcp"
       "53:53/udp"
+      "67:67/udp"
       "80:80/tcp"
       "443:443/tcp"
     ];

nixos/docker/pihole/docker-compose.yml

@@ -13,7 +13,7 @@ services:
       # Default HTTPs Port. FTL will generate a self-signed certificate
       - "443:443/tcp"
       # Uncomment the line below if you are using Pi-hole as your DHCP server
-      #- "67:67/udp"
+      - "67:67/udp"
       # Uncomment the line below if you are using Pi-hole as your NTP server
       #- "123:123/udp"
     environment: