diff --git a/hosts/skipper/network.nix b/hosts/skipper/network.nix
index ed204fa..ea84a19 100644
--- a/hosts/skipper/network.nix
+++ b/hosts/skipper/network.nix
@@ -46,6 +46,7 @@
 
   services.resolved = {
     enable = true;
+    dnssec = "true";
     dnsovertls = "true";
     domains = [ "~." ];
     fallbackDns = [ ];