diff --git a/modules/base.nix b/modules/base.nix
index 8633ca9..f3d856f 100644
--- a/modules/base.nix
+++ b/modules/base.nix
@@ -2,7 +2,10 @@
 {
   imports = [
     # DNS settings.
+    # TODO add nix option
     ./dns.nix
+    #./dns-unencrypted.nix
+
     # Nix garbage collection.
     ./nix-gc.nix
     # Display contact information during boot.
diff --git a/modules/dns-unencrypted.nix b/modules/dns-unencrypted.nix
new file mode 100644
index 0000000..973e25d
--- /dev/null
+++ b/modules/dns-unencrypted.nix
@@ -0,0 +1,11 @@
+{ config, pkgs, ... }:
+{
+  networking.nameservers = [
+    # https://www.kuketz-blog.de/empfehlungsecke/#dns
+    # unfiltered.adguard-dns.com (supports DNSSEC)
+   "94.140.14.140" "94.140.14.141"
+    # https://www.kuketz-blog.de/empfehlungsecke/#dns
+    # dot.ffmuc.net (supports DNSSEC)
+   "5.1.66.255" "185.150.99.255"
+  ];
+}