diff --git a/nixos/ryu/services/resolved.nix b/nixos/ryu/services/resolved.nix
index 69850d9f..4eb038b7 100644
--- a/nixos/ryu/services/resolved.nix
+++ b/nixos/ryu/services/resolved.nix
@@ -2,10 +2,14 @@
   # Disable all the dns stuff in favour of tailscale's DNS
   services.resolved = {
     enable = true;
-    dnssec = "true";
-    dnsovertls = "true";
-    domains = ["lemur-newton.ts.net"];
-    fallbackDns = [];
+    settings = {
+      Resolve = {
+        DNSSEC = "true";
+        DNSoverTLS = "true";
+        Domains = ["lemur-newton.ts.net"];
+        FallbackDNS = [];
+      };
+    };
   };
   networking.nameservers = [];
 }
diff --git a/nixos/tako/services/resolved.nix b/nixos/tako/services/resolved.nix
index e5a1ef14..5c264322 100644
--- a/nixos/tako/services/resolved.nix
+++ b/nixos/tako/services/resolved.nix
@@ -1,9 +1,13 @@
 {...}: {
   services.resolved = {
     enable = true;
-    dnssec = "true";
-    dnsovertls = "true";
-    domains = ["lemur-newton.ts.net"];
-    fallbackDns = ["1.1.1.1"];
+    settings = {
+      Resolve = {
+        DNSSEC = "true";
+        DNSoverTLS = "true";
+        Domains = ["lemur-newton.ts.net"];
+        FallbackDNS = [];
+      };
+    };
   };
 }
diff --git a/nixos/tsuba/services/resolved.nix b/nixos/tsuba/services/resolved.nix
index ec66fa41..eb956633 100644
--- a/nixos/tsuba/services/resolved.nix
+++ b/nixos/tsuba/services/resolved.nix
@@ -1,11 +1,9 @@
-{lib, ...}: {
+{...}: {
   services.resolved = {
     enable = false;
-    # dnssec = "true";
-    # domains = ["~." "lemur-newton.ts.net"];
-    # fallbackDns = ["1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one"];
-    fallbackDns = [];
-    # dnsovertls = "true";
+    settings = {
+      FallbackDNS = [];
+    };
   };
   networking.nameservers = [];
 }