diff --git a/modules/home/cli/utilities/dig/default.nix b/modules/home/cli/utilities/dig/default.nix
new file mode 100644
index 0000000..2f9ca19
--- /dev/null
+++ b/modules/home/cli/utilities/dig/default.nix
@@ -0,0 +1,11 @@
+{
+  pkgs,
+  ...
+}:
+{
+  home.packages = builtins.attrValues {
+    inherit (pkgs)
+      dig
+      ;
+  };
+}
diff --git a/systems/mars/config/wireguard.nix b/systems/mars/config/wireguard.nix
index fd2302b..74df4bc 100755
--- a/systems/mars/config/wireguard.nix
+++ b/systems/mars/config/wireguard.nix
@@ -1,11 +1,15 @@
 { config, flake, ... }:
 let
   inherit (flake.config.services.instances) wireGuard web;
+  inherit (flake.config.services) instances;
   inherit (flake.config.machines.devices) ceres mars;
   service = wireGuard;
 in
 {
   networking = {
+    hosts = {
+      ${ceres.wireguard.ip0} = [ instances.searx.domains.url0 ];
+    };
     wireguard.interfaces = {
       wg0 = {
         ips = [ "${mars.wireguard.ip0}/32" ];
@@ -16,7 +20,6 @@ in
             allowedIPs = [
               "${ceres.wireguard.ip0}/32"
               "${web.localhost.address4}/24"
-              "${web.remotehost.address0}/32"
             ];
             endpoint = "${web.remotehost.address0}:${builtins.toString service.ports.port1}";
             persistentKeepalive = 25;