diff --git a/machines/rigel/networking.nix b/machines/rigel/networking.nix
index bbab903..66e2b21 100644
--- a/machines/rigel/networking.nix
+++ b/machines/rigel/networking.nix
@@ -1,6 +1,44 @@
 let
-  ata-interface = "";
+  ata-interface = "enp2s0";
 in
 {
-  networking.interfaces = { };
+  # clan.core.vars.generators.networking.files.ata-interface.secret = false;
+
+  networking.interfaces = {
+    ${ata-interface} = {
+      useDHCP = false;
+      ipv4.addresses = [
+        {
+          address = "192.168.254.1";
+          prefixLength = 24;
+        }
+      ];
+    };
+  };
+
+  services.dnsmasq = {
+    enable = true;
+
+    settings = {
+      bind-interfaces = true;
+      server = [
+        "1.1.1.1"
+        "8.8.8.8"
+      ];
+      domain-needed = true;
+      domain = "localhost";
+      dhcp-range = [ "192.168.254.10,192.168.254.240,255.255.255.0,24h" ];
+      dhcp-option = [
+        "3,192.168.254.1"
+        "6,8.8.8.8,8.8.4.4"
+      ];
+      interface = [ ata-interface ];
+    };
+  };
+
+  networking.firewall.allowedUDPPorts = [
+    53
+    67
+  ];
+  networking.firewall.allowedTCPPorts = [ 53 ];
 }