diff --git a/modules/network/dns/cloudflare.nix b/modules/network/dns/cloudflare.nix
new file mode 100644
index 0000000..36d6173
--- /dev/null
+++ b/modules/network/dns/cloudflare.nix
@@ -0,0 +1,9 @@
+{
+  networking.resolvconf.useLocalResolver = true;
+  services.dnscrypt-proxy2 = {
+    enable = true;
+    settings = {
+      server_names = ["cloudflare" "cloudflare-ipv6"];
+    };
+  };
+}
diff --git a/modules/network/dns/default.nix b/modules/network/dns/default.nix
index 633c548..8b04f13 100644
--- a/modules/network/dns/default.nix
+++ b/modules/network/dns/default.nix
@@ -1,4 +1,3 @@
 {
-  imports = [./nextdns.nix];
-  networking.resolvconf.useLocalResolver = true;
+  imports = [./cloudflare.nix];
 }
diff --git a/modules/network/dns/nextdns.nix b/modules/network/dns/nextdns.nix
index a0d5a4d..0b6e386 100644
--- a/modules/network/dns/nextdns.nix
+++ b/modules/network/dns/nextdns.nix
@@ -1,4 +1,5 @@
-{...}: {
+{
+  networking.resolvconf.useLocalResolver = true;
   services.nextdns = {
     enable = true;
     arguments = ["-config" "75e43d"];