diff --git a/etc/systemd/network/10-ether.network b/etc/systemd/network/10-ether.network
index c313278a..7e90430d 100644
--- a/etc/systemd/network/10-ether.network
+++ b/etc/systemd/network/10-ether.network
@@ -28,6 +28,12 @@ IPv6LinkLocalAddressGenerationMode=stable-privacy
 #DNS=127.0.0.1
 #DNS=::1
 #DNS=8.8.4.4
+#DNSSEC=true
+#DNSSEC=allow-downgrade
+#DNSOverTLS=true
+#DNSOverTLS=opportunistic
+# Search domains
+Domains=.
 # Enable systemd-timesyncd with `timedatectl set-ntp true`, may be specified
 # multiple times, but you are using Chrony instead, right?
 #NTP=fi.pool.ntp.org
diff --git a/etc/systemd/network/10-wlan.network b/etc/systemd/network/10-wlan.network
index 839ce67a..1831255e 100644
--- a/etc/systemd/network/10-wlan.network
+++ b/etc/systemd/network/10-wlan.network
@@ -23,3 +23,10 @@ IPv6LinkLocalAddressGenerationMode=stable-privacy
 MulticastDNS=true
 # Windows
 LLMNR=true
+# systemd-resolved configuration
+#DNSSEC=true
+#DNSSEC=allow-downgrade
+#DNSOverTLS=true
+#DNSOverTLS=opportunistic
+# Search domains
+Domains=.