diff --git a/modules/15-dns-over-tls.sh b/modules/15-dns-over-tls.sh
new file mode 100644
index 0000000..183cc38
--- /dev/null
+++ b/modules/15-dns-over-tls.sh
@@ -0,0 +1,5 @@
+sudo sed -i "s/^#\?DNS=.*/DNS=157.90.170.95#dns.nairi.cloud/" /etc/systemd/resolved.conf &&
+  sudo sed -i "s/^#\?DNSOverTLS=.*/DNSOverTLS=yes/" /etc/systemd/resolved.conf &&
+  sudo sed -i "s/^#\?DNSSEC=.*/DNSSEC=yes/" /etc/systemd/resolved.conf &&
+  sudo sed -i "s/^#\?Domains=.*/Domains=~./" /etc/systemd/resolved.conf &&
+  ensure_service_active systemd-resolved