diff --git a/modules/networking.nix b/modules/networking.nix
index 991ba0f..39403ca 100644
--- a/modules/networking.nix
+++ b/modules/networking.nix
@@ -117,7 +117,8 @@ in {
       cache-size = 10000;
       local-ttl = 300;
 
-      conf-file = "/var/lib/dnsmasq/dnsmasq.blacklist.txt";
+      conf-file = "${pkgs.dnsmasq}/share/dnsmasq/trust-anchors.conf";
+      dnssec = true;
 
       address = "/coolneng.duckdns.org/192.168.13.2";
     };