diff --git a/pkgs/default.nix b/pkgs/default.nix
index eac68958..dd7e5e49 100644
--- a/pkgs/default.nix
+++ b/pkgs/default.nix
@@ -146,6 +146,8 @@ let
     python3 = unpatched.python3.override {
       packageOverrides = pythonPackagesOverlayFor final';
     };
+
+    trust-dns = callPackage ./patched/trust-dns { inherit (unpatched) trust-dns; };
   };
   sane-overlay = {
     sane = lib.recurseIntoAttrs (sane-additional // sane-patched);
diff --git a/pkgs/patched/trust-dns/default.nix b/pkgs/patched/trust-dns/default.nix
new file mode 100644
index 00000000..a41813ea
--- /dev/null
+++ b/pkgs/patched/trust-dns/default.nix
@@ -0,0 +1,13 @@
+{ trust-dns
+, fetchFromGitea
+}:
+trust-dns.overrideAttrs (_: {
+  # patched so that the recursive resolver is compatible with my infra.
+  src = fetchFromGitea {
+    domain = "git.uninsane.org";
+    owner = "colin";
+    repo = "hickory-dns";
+    rev = "67649863faf2e08f63963a96a491a4025aaf8ed6";
+    hash = "sha256-FRnFmCJI/1f92DOI1VXSPivSBzIR371gmgLUfLLiuPc=";
+  };
+})