try compartmental traefik

system/services/containers/traefik/default.nix

@@ -45,6 +45,18 @@
 
             config = {
                 
+                environment.etc."resolv.conf" = {
+                    enable = true;
+                    text = ''
+                        nameserver 1.1.1.1
+                        nameserver 1.0.0.1
+                        options edns0
+                        '';
+
+                    user = "root";
+                    mode = "0664";
+                };
+
                 services.traefik = {
 
                     enable = true;
@@ -266,8 +278,14 @@
                     };
                 };
 
-                networking.firewall.allowedTCPPorts = [ 80 443 81 444 ];
-                networking.firewall.allowedUDPPorts = [ 80 443 81 444 ];
+                networking = {
+                    firewall = {
+                        allowedTCPPorts = [ 80 443 81 444 ];
+                        allowedUDPPorts = [ 80 443 81 444 ];
+                    };
+
+                    useHostResolvConf = false;
+                };
 
                 system.stateVersion = "24.05";
             };