diff --git a/hosts/sarien/configuration.nix b/hosts/sarien/configuration.nix
index 3e3a245..8896e45 100644
--- a/hosts/sarien/configuration.nix
+++ b/hosts/sarien/configuration.nix
@@ -75,6 +75,14 @@
     fstrim.enable = true;
     openssh.enable = true;
     syncthing.openDefaultPorts = true;
+    dnscrypt-proxy2 = {
+      enable = true;
+      settings = {
+        require_dnssec = true;
+        server_names = ["mullvad-doh"];
+        bootstrap_resolvers = ["9.9.9.11:53" "9.9.9.9:53"];
+      };
+    };
   };
   services.scx = {
     enable = true;