diff --git a/hosts/common/global/default.nix b/hosts/common/global/default.nix
index ad5d4f81..9d11d3bb 100644
--- a/hosts/common/global/default.nix
+++ b/hosts/common/global/default.nix
@@ -39,6 +39,11 @@
     enableAllTerminfo = true;
   };
 
+  services.resolved = {
+    enable = true;
+    domains = [ "misterio.me" ];
+  };
+
   # Allows users to allow others on their binds
   programs.fuse.userAllowOther = true;
 
diff --git a/hosts/common/optional/tailscale.nix b/hosts/common/optional/tailscale.nix
index d125a3bd..eef020b5 100644
--- a/hosts/common/optional/tailscale.nix
+++ b/hosts/common/optional/tailscale.nix
@@ -1,7 +1,10 @@
 { lib, persistence, ... }:
 {
   services.tailscale.enable = true;
-  networking.firewall.checkReversePath = "loose";
+  networking.firewall = {
+    checkReversePath = "loose";
+    allowedUDPPorts = [ 41641 ]; # Facilitate firewall punching
+  };
 
   environment.persistence = lib.mkIf persistence {
     "/persist".directories = [ "/var/lib/tailscale" ];