diff --git a/nixos/roles/graphical/dns.nix b/nixos/roles/graphical/dns.nix
index 17d27271..276630ea 100644
--- a/nixos/roles/graphical/dns.nix
+++ b/nixos/roles/graphical/dns.nix
@@ -1,15 +1,19 @@
-_: {
+{lib, ...}: let
+  inherit (lib.modules) mkForce;
+in {
   networking = {
+    networkmanager.dns = mkForce "none";
     nameservers = [
-      "194.242.2.2" # For now, Mullvad DNS.
+      "9.9.9.9"
     ];
   };
   services.resolved = {
     enable = true;
     fallbackDns = [
-      "1.1.1.1"
+      "9.9.9.9"
     ];
-    dnssec = "false";
+    domains = ["~."];
+    dnssec = "true";
     extraConfig = ''
       DNSOverTLS=yes
     '';