diff --git a/network.nix b/network.nix
index 513b395..42707b8 100644
--- a/network.nix
+++ b/network.nix
@@ -22,7 +22,7 @@ in
       default = "systemd-resolved";
       example = "dnsmasq";
       description = "Set network DNS";
-      type = types.enum [ "systemd-resolved" "dnsmasq" ];
+      type = types.enum [ "systemd-resolved" "dnsmasq" "unbound" "none" "default" ];
     };
   };
 
@@ -35,6 +35,8 @@ in
     services.resolved.enable = (cfg.dns == "systemd-resolved");
     services.resolved.llmnr = mkForce "false"; # https://www.blackhillsinfosec.com/how-to-disable-llmnr-why-you-want-to/
 
+    services.unbound.enable = (cfg.dns == "unbound");
+
     networking.networkmanager = {
       wifi.backend = mkDefault "iwd";
       dns = mkDefault cfg.dns;