diff --git a/hosts/common/configs/system/dnsmasq/default.nix b/hosts/common/configs/system/dnsmasq/default.nix
index ef210c4..b49ea97 100644
--- a/hosts/common/configs/system/dnsmasq/default.nix
+++ b/hosts/common/configs/system/dnsmasq/default.nix
@@ -4,6 +4,9 @@
     enable = true;
 
     settings = {
+      bind-interfaces = true;
+      listen-address = [ "127.0.0.1" ];
+
       server = [
         "1.1.1.1"
         "1.0.0.1"