diff --git a/hosts/yodaTab/configuration.nix b/hosts/yodaTab/configuration.nix
index e6a80f8..fdb3a18 100644
--- a/hosts/yodaTab/configuration.nix
+++ b/hosts/yodaTab/configuration.nix
@@ -44,6 +44,7 @@ in
       #../../modules/android.nix
       #../../modules/podman.nix
       #../../modules/docker.nix
+      ../../modules/dns.nix
     ];
 
   networking.hostName = "yodaTab";
diff --git a/hosts/yodaTux/configuration.nix b/hosts/yodaTux/configuration.nix
index 728b74f..d9fa9d9 100644
--- a/hosts/yodaTux/configuration.nix
+++ b/hosts/yodaTux/configuration.nix
@@ -44,6 +44,7 @@ in
       ../../modules/android.nix
       #../../modules/podman.nix
       ../../modules/docker.nix
+      ../../modules/dns.nix
     ];
 
   networking.hostName = "yodaTux";
diff --git a/hosts/yodaYoga/configuration.nix b/hosts/yodaYoga/configuration.nix
index 1a6930c..dcdaa3d 100644
--- a/hosts/yodaYoga/configuration.nix
+++ b/hosts/yodaYoga/configuration.nix
@@ -46,6 +46,7 @@ in
       #../../modules/android.nix
       #../../modules/podman.nix
       ../../modules/docker.nix
+      ../../modules/dns.nix
     ];
 
   networking.hostName = "yodaYoga";
diff --git a/modules/base.nix b/modules/base.nix
index cf4272d..9aac29e 100644
--- a/modules/base.nix
+++ b/modules/base.nix
@@ -13,10 +13,6 @@
   # Enables wireless support via wpa_supplicant.
   # networking.wireless.enable = true;
 
-  # Configure network proxy if necessary.
-  #networking.proxy.default = "http://user:password@proxy:port/";
-  #networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
-
   # Enable networking.
   networking.networkmanager.enable = true;
 
diff --git a/modules/dns.nix b/modules/dns.nix
new file mode 100644
index 0000000..1e9ecf5
--- /dev/null
+++ b/modules/dns.nix
@@ -0,0 +1,12 @@
+{ config, pkgs, ... }:
+
+{
+  networking.nameservers = [
+    # https://www.kuketz-blog.de/empfehlungsecke/#dns
+    # dot.ffmuc.net (unterstützt DNSSEC)
+   "5.1.66.255" "185.150.99.255"
+    # https://www.kuketz-blog.de/empfehlungsecke/#dns
+    # unfiltered.adguard-dns.com (unterstützt DNSSEC)
+   "94.140.14.140" "94.140.14.141"
+  ];
+}