diff --git a/etc/systemd/resolved.conf.d/everywhere.conf b/etc/systemd/resolved.conf.d/everywhere.conf
index 0f07da8e..0aa18ad6 100644
--- a/etc/systemd/resolved.conf.d/everywhere.conf
+++ b/etc/systemd/resolved.conf.d/everywhere.conf
@@ -1,3 +1,5 @@
+# Config file to attempt DNSSEC and DoT everywhere, regardless of tech
+# skill
 [Resolve]
 DNSSEC=allow-downgrade
 DNSOverTLS=opportunistic