diff --git a/modules/server/unbound.nix b/modules/server/unbound.nix
index 3fbd5fd..4743b73 100644
--- a/modules/server/unbound.nix
+++ b/modules/server/unbound.nix
@@ -12,7 +12,7 @@ with lib; {
       services = {
         resolved = {
           enable = true;
-          dnssec = "allow-downgrade";
+          # dnssec = "allow-downgrade";
           llmnr = "true";
           fallbackDns = ["127.0.0.1" "::1"];
           extraConfig = ''