diff --git a/modules/nixos/basics/resolved.nix b/modules/nixos/basics/resolved.nix
index 2f06ff2..a4c2ea2 100644
--- a/modules/nixos/basics/resolved.nix
+++ b/modules/nixos/basics/resolved.nix
@@ -1,7 +1,7 @@
 {
   services.resolved = {
     enable = true;
-    dnssec = "true";
+    dnssec = "allow-downgrade";
     # dnsovertls = "true";
     fallbackDns = [
       # CLOUDFLARE