diff --git a/hosts/common/configs/system/dnsmasq/default.nix b/hosts/common/configs/system/dnsmasq/default.nix
new file mode 100644
index 0000000..ef210c4
--- /dev/null
+++ b/hosts/common/configs/system/dnsmasq/default.nix
@@ -0,0 +1,19 @@
+{ ... }:
+{
+  services.dnsmasq = {
+    enable = true;
+
+    settings = {
+      server = [
+        "1.1.1.1"
+        "1.0.0.1"
+      ];
+
+      conf-dir = "/etc/dnsmasq.d,*.conf";
+    };
+  };
+
+  systemd.tmpfiles.rules = [ "d /etc/dnsmasq.d 0755 root resolvconf" ];
+
+  networking.networkmanager.dns = "dnsmasq";
+}
diff --git a/hosts/eirene/default.nix b/hosts/eirene/default.nix
index 97ad40f..79717ec 100644
--- a/hosts/eirene/default.nix
+++ b/hosts/eirene/default.nix
@@ -13,6 +13,7 @@
     ../common/configs/system/brightnessctl
     ../common/configs/system/btrfs
     ../common/configs/system/cpu
+    ../common/configs/system/dnsmasq
     ../common/configs/system/documentation
     ../common/configs/system/docker
     ../common/configs/system/getty
diff --git a/hosts/elara/default.nix b/hosts/elara/default.nix
index 0d8e578..37be8cf 100644
--- a/hosts/elara/default.nix
+++ b/hosts/elara/default.nix
@@ -16,6 +16,7 @@
     ../common/configs/system/btrfs
     ../common/configs/system/cloudflared
     ../common/configs/system/cpu
+    ../common/configs/system/dnsmasq
     ../common/configs/system/documentation
     ../common/configs/system/docker
     ../common/configs/system/getty