diff --git a/etc/NetworkManager/conf.d/unbound.conf b/etc/NetworkManager/conf.d/unbound.conf
new file mode 100644
index 00000000..a836c17f
--- /dev/null
+++ b/etc/NetworkManager/conf.d/unbound.conf
@@ -0,0 +1,4 @@
+# This expects the package dnssec-trigger to be installed as it will manage
+# /etc/resolv.conf according to manual page for NetworkManager.conf
+[main]
+dns=unbound