diff --git a/applications/dns.nix b/applications/dns.nix
index a9c0d70..a7ed62d 100644
--- a/applications/dns.nix
+++ b/applications/dns.nix
@@ -87,6 +87,11 @@ in {
         include "/run/agenix/dns_dnskeys";
       '';
 
+      # piles of no valid RRSIG resolving 'com/DS/IN' errors
+      #extraOptions = ''
+      #  dnssec-validation auto;
+      #'';
+
       # set the upstream dns servers
       # overrides the default dns servers
       forwarders = [