diff --git a/modules/networking-client/default.nix b/modules/networking-client/default.nix
index 0884ad5..d22cf98 100644
--- a/modules/networking-client/default.nix
+++ b/modules/networking-client/default.nix
@@ -1,3 +1,4 @@
+{ config, ... }:
 {
   networking.useDHCP = false;
 
@@ -13,10 +14,18 @@
   };
   services.resolved = {
     enable = true;
-    fallbackDns = [ "10.1.0.1" ];
+    fallbackDns = [
+      "95.216.8.12#securedns.privatevoid.net"
+      "152.67.73.164#securedns.privatevoid.net"
+      "10.1.0.1"
+    ];
     llmnr = "true";
     dnssec = "false";
-    extraConfig = "Cache=no-negative";
+    extraConfig = ''
+      Cache=no-negative
+      DNSOverTLS=opportunistic
+      DNS=${builtins.concatStringsSep " " config.services.resolved.fallbackDns}
+    '';
   };
   networking.firewall = let
     ports = [