diff --git a/modules/nixos/core/network.nix b/modules/nixos/core/network.nix
index daa6477..5bd2ff8 100644
--- a/modules/nixos/core/network.nix
+++ b/modules/nixos/core/network.nix
@@ -27,8 +27,15 @@ in with lib; {
 
   config = {
     networking.networkmanager.enable = true;
-    networking.nameservers = [ "45.90.28.97" "45.90.30.97" ];
-    # services.resolved.enable = true;
+    # networking.nameservers = [ "45.90.28.97" "45.90.30.97" ];
+    networking.nameservers = [ "194.242.2.4#base.dns.mullvad.net" ];
+    services.resolved = {
+      enable = true;
+      dnssec = "false";
+      dnsovertls = "true";
+      domains = [ "~." ];
+      fallbackDns = [ "194.242.2.4#base.dns.mullvad.net" ];
+    };
 
     # udev 250 doesn't reliably reinitialize devices after restart
     systemd.services.systemd-udevd.restartIfChanged = false;