diff --git a/cluster/services/ipfs/node.nix b/cluster/services/ipfs/node.nix
index 454d800..ce581f2 100644
--- a/cluster/services/ipfs/node.nix
+++ b/cluster/services/ipfs/node.nix
@@ -6,6 +6,7 @@ let
   ipfsApi = pkgs.writeTextDir "api" apiAddress;
   gw = config.links.ipfsGateway;
   ipfsPort = 110;
+  nameservers = lib.unique config.networking.nameservers;
 in
 {
   imports = [
@@ -155,6 +156,7 @@ in
         "fc00::/7"
         "fe80::/10"
       ];
+      IPAddressAllow = nameservers;
     };
     postStart = "chmod 660 /run/ipfs/ipfs-api.sock";
   };