diff --git a/modules/hardware/networking.nix b/modules/hardware/networking.nix
index beb57b0..abafd77 100644
--- a/modules/hardware/networking.nix
+++ b/modules/hardware/networking.nix
@@ -9,11 +9,21 @@ in {
   };
 
   config = mkIf cfg.enable {
-    networking.networkmanager.enable = true;
-    networking.networkmanager.wifi.backend = "iwd";
-    networking.networkmanager.wifi.powersave = false;
+    networking.networkmanager = {
+      enable = true;
+      dns = "systemd-resolved";
+      wifi.backend = "iwd";
+      wifi.powersave = false;
+    };
+
+    services.resolved.enable = true;
+    services.resolved.settings.Resolve.DNSSEC = "allow-downgrade";
+    services.resolved.settings.Resolve.DNSOverTLS = "opportunistic";
+
+    networking.wireless.iwd.enable = true;
     networking.wireless.iwd.settings.Settings.AutoConnect = true;
 
+    # default startup time is Slowww
     systemd.services.NetworkManager-wait-online.enable = false;
   };
 }