diff --git a/base/networking.nix b/base/networking.nix
index 5c710a3..11f997e 100644
--- a/base/networking.nix
+++ b/base/networking.nix
@@ -8,6 +8,6 @@
 
   services.resolved = {
     enable = lib.mkDefault true;
-    dnssec = "false"; # Supposdly this keeps breaking and the default is to allow downgrades anyways...
+    settings.Resolve.DNSSEC = false; # Supposdly this keeps breaking and the default is to allow downgrades anyways...
   };
 }