diff --git a/data/wg-mesh-hosts.json b/data/wg-mesh-hosts.json
index 204669f..d910ff2 100644
--- a/data/wg-mesh-hosts.json
+++ b/data/wg-mesh-hosts.json
@@ -2,7 +2,7 @@
   "_purpose": "Source of truth for DNS records served to the wg1 mesh by apricot's dnsmasq (instance bound to 10.9.0.2:53). Consumed by bin/wg-dns-sync.",
   "_consumers": ["bin/wg-dns-sync"],
   "_dnsmasq_address_syntax": "Leading dot in 'name' = wildcard match for the domain and any subdomain. No leading dot = exact match only.",
-  "listen_address": "10.9.0.2",
+  "listen_address": "127.0.0.1,10.9.0.2",
   "records": [
     {
       "name": ".apricot.local",