diff --git a/states/systemd/defaults.yaml b/states/systemd/defaults.yaml
index 437492f..51618f9 100644
--- a/states/systemd/defaults.yaml
+++ b/states/systemd/defaults.yaml
@@ -10,6 +10,17 @@ systemd:
     networkd:
       Network:
         SpeedMeter: "yes"
+    resolved:
+      Resolve:
+        DNS: 9.9.9.9 149.112.112.112 2620:fe::fe 2620:fe::9
+        Domains: paulbsd.com
+        LLMNR: "no"
+        MulticastDNS: "no"
+        DNSSEC: "no"
+        DNSOverTLS: "no"
+        DNSStubListener: "yes"
+        Cache: "yes"
+        ReadEtcHosts: "yes"
   presets:
     ssh:
       - enable ssh.service