diff --git a/hosts/darwin/default.nix b/hosts/darwin/default.nix
index 919b810e..25cc7264 100644
--- a/hosts/darwin/default.nix
+++ b/hosts/darwin/default.nix
@@ -28,6 +28,9 @@
       listenPort = 60990; # to match firewall allowedUDPPorts (without this wg uses random port numbers)
       privateKeyFile = config.age.secrets.work-wg.path;
       dns = [ "10.0.69.4" ];
+      postDown = ''
+        sudo /usr/sbin/networksetup -setdnsservers Wi-Fi "Empty"
+      '';
       peers = [
         # For a client configuration, one peer entry for the server will suffice.
         {