diff --git a/applications/dns.nix b/applications/dns.nix
index 3eddde2..cb59729 100644
--- a/applications/dns.nix
+++ b/applications/dns.nix
@@ -77,6 +77,17 @@ in {
           include "/run/agenix/dns_dnskeys";
         '';
 
+        # set the upstream dns servers
+        # overrides the default dns servers
+        forwarders = [
+          # Cloudflare
+          "1.1.1.1"
+          # Google
+          "8.8.8.8"
+          # Quad9
+          "9.9.9.9"
+        ];
+
         zones = {
           /*
           put any other zones above skynet and link to their files like so: