ahhh right, apologies. The server VPN client runs in an isolated container, separate from the CoreDNS server. The only way right now to reach the DNS server over a VPN address is to add an additional client on the host server and use that address