1 files changed, 2 insertions, 0 deletions
diff --git a/config/dns.nix b/config/dns.nix
index b8986be..f3dd09d 100644
--- a/config/dns.nix
+++ b/config/dns.nix
@@ -25,6 +25,8 @@ in
       "10.0.0.0/8"
     ];
     extraOptions = ''
+      dnssec-enable yes;
+      dnssec-validation yes;
       serial-update-method unixtime;
       listen-on-v6 { 2001:470:8e2e:20::d; };
     '';