diff --git a/modules/resolved.nix b/modules/resolved.nix
index 4872c66..e647c1a 100644
--- a/modules/resolved.nix
+++ b/modules/resolved.nix
@@ -1,14 +1,28 @@
-{ self, lib, ... }: with lib;
+{ lib, ... }: with lib;
 
 systemConfiguration {
   services.resolved = enabled {
-    domains = [ self.cube.networking.domain ];
+    dnssec     = "true";
+    dnsovertls = "true";
+
+    extraConfig = ''
+      DNS=45.90.28.0#7f2bf8.dns.nextdns.io
+      DNS=2a07:a8c0::#7f2bf8.dns.nextdns.io
+      DNS=45.90.30.0#7f2bf8.dns.nextdns.io
+      DNS=2a07:a8c1::#7f2bf8.dns.nextdns.io
+    '';
 
-    dnsovertls  = "opportunistic";
     fallbackDns = [
       "1.1.1.1#one.one.one.one"
       "2606:4700:4700::1111#one.one.one.one"
+
+      "1.0.0.1#one.one.one.one"
+      "2606:4700:4700::1001#one.one.one.one"
+
       "8.8.8.8#dns.google"
+      "2001:4860:4860::8888#dns.google"
+
+      "8.8.4.4#dns.google"
       "2001:4860:4860::8844#dns.google"
     ];
   };