diff --git a/network.nix b/network.nix
index de5a3e4..1b1c6db 100644
--- a/network.nix
+++ b/network.nix
@@ -35,10 +35,10 @@ in
 
     services.resolved = {
       enable = (cfg.dns == "systemd-resolved");
-      llmnr = mkForce "false"; # https://www.blackhillsinfosec.com/how-to-disable-llmnr-why-you-want-to/
-      dnssec = "false"; # Causes issues with masquerading DNS
-      extraConfig = myLib.config.toSystemd {
-        "DNS" = [
+      settings.Resolve = {
+        LLMNR = mkForce false; # https://www.blackhillsinfosec.com/how-to-disable-llmnr-why-you-want-to/
+        DNSSEC = false;
+        DNS = [
           # cloudflare-dns.com
           "1.1.1.1"
           "2606:4700:4700::1111"
diff --git a/services/general.nix b/services/general.nix
index e1b8b3a..2b39d70 100644
--- a/services/general.nix
+++ b/services/general.nix
@@ -154,10 +154,9 @@ in {
       '';
     };
 
-    services.resolved.extraConfig =
-      ''
-      mDNS=no
-      '';
+    services.resolved.settings.Resolve = {
+      MulticastDNS = false;
+    };
 
 
     services.nginx = {