diff --git a/hosts/skipper/network.nix b/hosts/skipper/network.nix
index 0947805..f11c212 100644
--- a/hosts/skipper/network.nix
+++ b/hosts/skipper/network.nix
@@ -3,6 +3,13 @@
   networking = {
     hostName = "Skipper";
 
+    extraHosts = ''
+      10.8.1.1 proxy
+      10.8.1.2 skipper
+      10.8.1.3 rico1
+      10.8.1.4 rico2
+    '';
+
     networkmanager = {
       enable = true;
       dns = "systemd-resolved";
@@ -28,5 +35,14 @@
     };
   };
 
-  services.resolved.enable = true;
+  services.resolved = {
+    enable = true;
+    dnssec = "allow-downgrade";
+    extraConfig = ''
+      [Resolve]
+      DNS=9.9.9.11#dns11.quad9.net 2620:fe::11#dns11.quad9.net 149.112.112.11#dns11.quad9.net 2620:fe::fe:11#dns11.quad9.net
+      DNSOverTLS=yes
+      Domains=~.
+    '';
+  };
 }