diff --git a/install/first-run/firewall.sh b/install/first-run/firewall.sh
index cc187dc2..96210c8b 100644
--- a/install/first-run/firewall.sh
+++ b/install/first-run/firewall.sh
@@ -8,6 +8,7 @@ sudo ufw allow 53317/tcp
 
 # Allow Docker containers to use DNS on host
 sudo ufw allow in proto udp from 172.16.0.0/12 to 172.17.0.1 port 53 comment 'allow-docker-dns'
+sudo ufw allow in proto udp from 192.168.0.0/16 to 172.17.0.1 port 53 comment 'allow-docker-dns'
 
 # Turn on the firewall
 sudo ufw --force enable
diff --git a/migrations/1777282771.sh b/migrations/1777282771.sh
new file mode 100644
index 00000000..b350376f
--- /dev/null
+++ b/migrations/1777282771.sh
@@ -0,0 +1,5 @@
+echo "Allow Docker DNS from Docker's 192.168 address pool"
+
+if omarchy-cmd-present ufw && sudo ufw status | grep -q "Status: active"; then
+  sudo ufw allow in proto udp from 192.168.0.0/16 to 172.17.0.1 port 53 comment 'allow-docker-dns'
+fi