{
  services.resolved = {
    enable = true;
    dnssec = "allow-downgrade";
    # dnsovertls = "true";
    fallbackDns = [
      # CLOUDFLARE
      "1.1.1.1"
      "1.0.0.1"
      "2606:4700:4700::1111"
      "2606:4700:4700::1001"

      #GOOGLE
      "8.8.8.8"
      "2001:4860:4860::8844"
    ];
  };
}