How to wildcard-forward an integration (AdGuard)

Howdi;

Have searched around both here and on the other site and nothing fits.

TL; DR Supervisord is exposing adguards port but on 127.0.0.1 rather than 0.0.0.0, and the suggested config options aren’t there; how to persistently change the forward-host?

Anyway; setup AdGuard, working great through my TailScale network (as it’s a ‘host-local’ connection) but can’t get any ‘external’ devices to use AdGuard because port 53 is stuck listening on 127.0.0.1

So, from the supervisord host:

$ sudo netstat -tlnp | grep :53
tcp        0      0 172.30.32.1:53          0.0.0.0:*               LISTEN      43756/./AdGuardHome
tcp        0      0 127.0.0.53:53           0.0.0.0:*               LISTEN      414/systemd-resolve
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      43756/./AdGuardHome
tcp6       0      0 ::1:53                  :::*                    LISTEN      43756/./AdGuardHome

Thing is, system->networking looks like this;

and from within ha container, ha network info, host_network is being listed as null, but I can’t see any obvious documentation around that state…

And AdGuard is evidently listening; I also tried the bind_host trick mentioned a few places but to no avail.

Not sure how to debug; any ideas?