diff --git a/files/etc/systemd/resolved.conf.d/dnssec.conf b/files/etc/systemd/resolved.conf.d/dnssec.conf
new file mode 100644
index 0000000..d43d54a
--- /dev/null
+++ b/files/etc/systemd/resolved.conf.d/dnssec.conf
@@ -0,0 +1,2 @@
+[Resolve]
+DNSSEC=no