diff --git a/nixos/base/network.nix b/nixos/base/network.nix
index 840b8bdf..e514ed90 100644
--- a/nixos/base/network.nix
+++ b/nixos/base/network.nix
@@ -1,10 +1,11 @@
 {
   inputs,
   name,
+  config,
   lib,
   ...
 }: let
-  inherit (lib.modules) mkDefault mkOverride;
+  inherit (lib.modules) mkIf mkOrder mkDefault mkOverride;
   inherit (inputs.self.lib.lib) domain;
 in {
   networking = {
@@ -12,4 +13,9 @@ in {
     domain = mkDefault domain;
     hostName = mkOverride 25 name;
   };
+
+  # work around https://github.com/NixOS/nixpkgs/issues/132646
+  system.nssDatabases.hosts = mkIf config.services.resolved.enable (
+    mkOrder 500 [ "files" ]
+  );
 }