diff --git a/core/archipelago/src/api/rpc/package/install.rs b/core/archipelago/src/api/rpc/package/install.rs
index 5898ef49..042cc02e 100644
--- a/core/archipelago/src/api/rpc/package/install.rs
+++ b/core/archipelago/src/api/rpc/package/install.rs
@@ -191,6 +191,9 @@ impl RpcHandler {
             }
         }
 
+        // DNS: ensure host.containers.internal resolves (needed for Tor proxy, inter-service calls)
+        run_args.push("--add-host=host.containers.internal:host-gateway");
+
         // Security hardening (skip for privileged containers)
         let security_caps: Vec<String> = if !is_tailscale {
             get_app_capabilities(package_id)