diff --git a/modules/default.nix b/modules/default.nix
index 72dc6b5..430d3df 100644
--- a/modules/default.nix
+++ b/modules/default.nix
@@ -127,7 +127,18 @@
       i18n.supportedLocales = (options.i18n.supportedLocales.default) ++ (lib.optionals config.sbruder.full [
         "de_DE.UTF-8/UTF-8"
       ]);
-      services.resolved.enable = lib.mkOverride 99 false;
+
+      services.resolved = {
+        # Set systemd-resolved’s fallback to Quad9 (instead of cloudflare/google)
+        fallbackDns = [ "9.9.9.9" "149.112.112.112" "2620:fe::fe" "2620:fe::9" ];
+        # Allow resolving single lable hostnames (e.g., hostnames on the local network)
+        llmnr = "false";
+        # resolved does not automatically append the search domain (for whatever reason)
+        extraConfig = ''
+          ResolveUnicastSingleLabel=yes
+          Cache=no-negative
+        '';
+      };
     }
     (lib.mkIf config.sbruder.full {
       services.fwupd.enable = true;