diff --git a/modules/nixos/basics/default.nix b/modules/nixos/basics/default.nix
index 383018d..553880a 100644
--- a/modules/nixos/basics/default.nix
+++ b/modules/nixos/basics/default.nix
@@ -7,6 +7,7 @@
     ./fstrim.nix
     ./fwupd.nix
     ./remote-deploy.nix
+    ./resolved.nix
     ./tailscale.nix
     ./zerotier.nix
   ];
diff --git a/modules/nixos/basics/resolved.nix b/modules/nixos/basics/resolved.nix
new file mode 100644
index 0000000..a11fe38
--- /dev/null
+++ b/modules/nixos/basics/resolved.nix
@@ -0,0 +1,11 @@
+{
+  services.resolved = {
+    enable = true;
+    dnssec = "true";
+    # dnsovertls = "true";
+    fallbackDns = [
+      "1.1.1.1"
+      "8.8.8.8"
+    ];
+  };
+}