diff --git a/modules/base/network/wireguard.nix b/modules/base/network/wireguard.nix
index 9ad3e5be..93a4cc0d 100644
--- a/modules/base/network/wireguard.nix
+++ b/modules/base/network/wireguard.nix
@@ -58,10 +58,10 @@ in
             "127.0.0.0/8 allow"
             "10.240.0.0/24 allow"
           ];
-          private-domain = "local";
-          domain-insecure = "local";
-          local-zone = builtins.map (name: ''"${name}.local" redirect'') (builtins.attrNames data);
-          local-data = builtins.map (name: ''"${name}.local IN A ${data.${name}.ip}"'') (builtins.attrNames data);
+          private-domain = "private";
+          domain-insecure = "private";
+          local-zone = builtins.map (name: ''"${name}.private" redirect'') (builtins.attrNames data);
+          local-data = builtins.map (name: ''"${name}.private IN A ${data.${name}.ip}"'') (builtins.attrNames data);
         };
         forward-zone = {
           name = ''"."'';
@@ -120,7 +120,7 @@ in
           enable = true;
           name = "wg0";
           address = [ "${data.${config.networking.hostName}.ip}/32" ];
-          domains = [ "local" ];
+          domains = [ "private" ];
           dns = [ data.lasting-integrity.ip ];
           linkConfig.MTUBytes = "1342";
           routes = [{