diff --git a/roles/config/files/etc/NetworkManager/conf.d/mdns.conf b/roles/config/files/etc/NetworkManager/conf.d/mdns.conf
new file mode 100644
index 00000000..9f4e006a
--- /dev/null
+++ b/roles/config/files/etc/NetworkManager/conf.d/mdns.conf
@@ -0,0 +1,3 @@
+[connection]
+mdns=2
+llmnr=0
diff --git a/roles/config/files/etc/systemd/resolved.conf.d/config.conf b/roles/config/files/etc/systemd/resolved.conf.d/config.conf
new file mode 100644
index 00000000..0eb8ef79
--- /dev/null
+++ b/roles/config/files/etc/systemd/resolved.conf.d/config.conf
@@ -0,0 +1,6 @@
+[resolve]
+DNS=
+FallbackDNS=9.9.9.9#dns.quad9.net 149.112.112.112#dns.quad9.net 2620:fe::fe#dns.quad9.net 2620:fe::9#dns.quad9.net
+MulticastDNS=yes
+LLMNR=no
+DNSSEC=allow-downgrade