diff --git a/hosts/containers/dnscache/configuration.nix b/hosts/containers/dnscache/configuration.nix
index 8e44b13f..3002b3de 100644
--- a/hosts/containers/dnscache/configuration.nix
+++ b/hosts/containers/dnscache/configuration.nix
@@ -87,6 +87,7 @@
         "1.0.0.1@853" #cloudflare-dns.com
         "2606:4700:4700::1001@853" #cloudflare-dns.com
     ];
+    forwardTlsUpstream = true;
     extraConfig = ''
       server:
         ssl-upstream: yes
@@ -96,11 +97,15 @@
         domain-insecure: "22.172.in-addr.arpa"
         domain-insecure: "23.172.in-addr.arpa"
         domain-insecure: "d.f.ip6.arpa"
+        domain-insecure: "ffdd"
+        domain-insecure: "10.200.in-addr.arpa"
         local-zone: "20.172.in-addr.arpa." nodefault
         local-zone: "21.172.in-addr.arpa." nodefault
         local-zone: "22.172.in-addr.arpa." nodefault
         local-zone: "23.172.in-addr.arpa." nodefault
         local-zone: "d.f.ip6.arpa." nodefault
+        local-zone: "ffdd"
+        local-zone: "10.200.in-addr.arpa"
 
       remote-control:
         control-enable: yes