diff --git a/modules/retiolum/default.nix b/modules/retiolum/default.nix
index d852521..4ca3ee8 100644
--- a/modules/retiolum/default.nix
+++ b/modules/retiolum/default.nix
@@ -31,6 +31,8 @@ in {
   config = {
     services.tinc.networks.${netname} = {
       name = cfg.nodename;
+      # allow resolving dns
+      chroot = false;
       extraConfig = ''
         LocalDiscovery = yes