diff --git a/hw/rift/default.nix b/hw/rift/default.nix
index ae11886..a0ef133 100644
--- a/hw/rift/default.nix
+++ b/hw/rift/default.nix
@@ -14,5 +14,9 @@
     # Open ports: DNS (53), mc-proxy (443, 8443, 9443), exod (8080, 9090).
     networking.firewall.allowedTCPPorts = [ 53 443 8443 9443 8080 9090 ];
     networking.firewall.allowedUDPPorts = [ 53 ];
+
+    # Route internal Metacircular zones to rift's own CoreDNS.
+    networking.nameservers = [ "192.168.88.181" ];
+    services.resolved.domains = [ "~mcp.metacircular.net" ];
   };
 }