diff --git a/nixos/machines/hera/configuration.nix b/nixos/machines/hera/configuration.nix
index 36ea1ad0..9b2a8b80 100644
--- a/nixos/machines/hera/configuration.nix
+++ b/nixos/machines/hera/configuration.nix
@@ -56,9 +56,6 @@ in {
     }
   ];
 
-  programs = {
-    java.enable = true;
-  };
   systemd.services =
     {
       pg_backup = {
diff --git a/nixos/machines/hera/network.nix b/nixos/machines/hera/network.nix
index 1ac5dc3b..212b928b 100644
--- a/nixos/machines/hera/network.nix
+++ b/nixos/machines/hera/network.nix
@@ -89,7 +89,15 @@ in {
       };
     };
   };
+
   services = {
+    unbound = {
+      enable = true;
+      settings.server = {
+        access-control = ["127.0.0.0/8 allow" "::1/128 allow" "fdc0:7::/64 allow"];
+        interface = ["::1" "127.0.0.1" hosts.vpn.hera];
+      };
+    };
     ndppd = {
       enable = true;
       configFile = pkgs.writeText "ndppd.conf" ''