Some checks failed
validate / lint (push) Failing after 2s
UFW allowed 53/udp+tcp from every other internal subnet but not from 10.10.0.0/24 (the WireGuard client subnet), so once the tunnel itself was reachable, decrypted DNS queries still got dropped at minisforum's own INPUT chain before reaching Technitium. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>