diff --git a/hosts/pinwheel/modules/openvpn/default.nix b/hosts/pinwheel/modules/openvpn/default.nix
index 4522c2e..8288f27 100644
--- a/hosts/pinwheel/modules/openvpn/default.nix
+++ b/hosts/pinwheel/modules/openvpn/default.nix
@@ -23,15 +23,14 @@ in
 
     services.resolved = {
       enable = true;
-      dnssec = "false";
-      domains = [ "~." ];
-      fallbackDns = [
-        "1.1.1.1#one.one.one.one"
-        "1.0.0.1#one.one.one.one"
-      ];
-      extraConfig = ''
-        DNSOverTLS=yes
-      '';
+      settings = {
+        Resolve = {
+          Domains = [ "~." ];
+          DNSSEC = false;
+          DNSOverTLS = true;
+        };
+      };
+
     };
   };
 }