From c49e26d8288d30438747eb594693f7e6d75ec67b Mon Sep 17 00:00:00 2001
From: clerie <git@clerie.de>
Date: Sun, 1 Jun 2025 20:32:50 +0200
Subject: [PATCH] modules/nginx-port-forward: Resolve upstream hostnames as
 IPv6 only

---
 modules/nginx-port-forward/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules/nginx-port-forward/default.nix b/modules/nginx-port-forward/default.nix
index c54e018..7a13859 100644
--- a/modules/nginx-port-forward/default.nix
+++ b/modules/nginx-port-forward/default.nix
@@ -9,6 +9,8 @@ let
 
   mkServerBlock = isUDP: port: forward: ''
     server {
+      resolver 127.0.0.53 ipv4=off;
+
       listen ${port}${optionalString isUDP " udp"}${optionalString (forward.certName != null) " ssl"};
       listen [::]:${port}${optionalString isUDP " udp"}${optionalString (forward.certName != null) " ssl"};
 
@@ -24,8 +26,6 @@ let
 
   portForwardConf = ''
     stream {
-      resolver 127.0.0.53;
-
       ${ concatStringsSep "\n" (mapAttrsToList (mkServerBlock false) cfg.tcpPorts) }
       ${ concatStringsSep "\n" (mapAttrsToList (mkServerBlock true) cfg.udpPorts) }
     }