diff --git a/modules/servers/per-server/heimdall/services/wireguard.nix b/modules/servers/per-server/heimdall/services/wireguard.nix
index bd01782..79247bc 100644
--- a/modules/servers/per-server/heimdall/services/wireguard.nix
+++ b/modules/servers/per-server/heimdall/services/wireguard.nix
@@ -1,4 +1,8 @@
 {config, ...}: {
+  services.resolved.settings.Resolve = {
+    DNSStubListener = "no";
+  };
+
   networking = {
     nat = {
       enable = true;
diff --git a/modules/servers/per-server/tyr/services/wireguard.nix b/modules/servers/per-server/tyr/services/wireguard.nix
index 5dd8270..0d58945 100644
--- a/modules/servers/per-server/tyr/services/wireguard.nix
+++ b/modules/servers/per-server/tyr/services/wireguard.nix
@@ -1,4 +1,8 @@
 {config, ...}: {
+  services.resolved.settings.Resolve = {
+    DNSStubListener = "no";
+  };
+
   networking = {
     nat = {
       enable = true;