diff --git a/cluster/services/dns/authoritative.nix b/cluster/services/dns/authoritative.nix
index dd56ced..586f654 100644
--- a/cluster/services/dns/authoritative.nix
+++ b/cluster/services/dns/authoritative.nix
@@ -38,6 +38,8 @@ in {
       gpgsql-extra-connection-parameters = "passfile=${config.age.secrets.pdns-db-credentials.path}";
       version-string = "Private Void DNS";
       enable-lua-records = "yes";
+      expand-alias = "yes";
+      resolver = "127.0.0.1:53";
     };
   };