diff --git a/ansible/roles/common/defaults/main.yaml b/ansible/roles/common/defaults/main.yaml
index 87b4ff9..1d4c8c6 100644
--- a/ansible/roles/common/defaults/main.yaml
+++ b/ansible/roles/common/defaults/main.yaml
@@ -25,6 +25,8 @@ ufw_allowed_ports:
   - { port: 6443, proto: tcp, comment: K3s API server }
   - { port: 10250, proto: tcp, comment: Kubelet, src: 10.10.40.0/24 }
   - { port: 8472, proto: udp, comment: Flannel VXLAN, src: 10.10.40.0/24 }
+  - { port: 53, proto: udp, comment: WireGuard road-warrior DNS, src: 10.10.0.0/24 }
+  - { port: 53, proto: tcp, comment: WireGuard road-warrior DNS, src: 10.10.0.0/24 }
 
 data_dirs:
   - /data/gitea