updated dnsmasq service

modules/build-types/pxe-boot.nix

@@ -417,7 +417,10 @@ in
           ExecStart = stageSystemRescue;
         };
       };
-      dnsmasq = {
+
+    };
+  };
+    services.dnsmasq = {
       enable = true;
       settings = {
         # Proxy mode: respond only to PXE DHCP requests, leave normal leases to router
@@ -438,9 +441,6 @@ in
         ];
       };
     };
-    };
-  };
-
   networking.firewall.allowedTCPPorts = [ vars.ports.pxeBootHttp ];
-  networking.firewall.allowedUDPPorts = [ vars.ports.pxeBootTftp ];
+  networking.firewall.allowedUDPPorts = [ vars.ports.pxeBootTftp 67 ];
 }