diff --git a/modules/common/dns.nix b/modules/common/dns.nix
new file mode 100644
index 0000000..5a72f02
--- /dev/null
+++ b/modules/common/dns.nix
@@ -0,0 +1,5 @@
+{ lib, ... }:
+{
+  networking.resolvconf.enable = false;
+  environment.etc."resolv.conf".text = lib.mkForce "nameserver 127.0.0.1";
+}
diff --git a/modules/graphical/dns.nix b/modules/graphical/dns.nix
index 599a2d4..f9a9d37 100644
--- a/modules/graphical/dns.nix
+++ b/modules/graphical/dns.nix
@@ -1,5 +1,4 @@
 {
-  networking.resolvconf.useLocalResolver = true;
   services.dnsproxy = {
     enable = true;
     flags = [
diff --git a/modules/server/caddy.nix b/modules/server/caddy.nix
index d77ef1f..82f37b6 100644
--- a/modules/server/caddy.nix
+++ b/modules/server/caddy.nix
@@ -54,7 +54,7 @@
           "github.com/ggicci/caddy-jwt@v1.1.0"
           "pkg.jsn.cam/caddy-defender@v0.9.0"
         ];
-        hash = "sha256-yvBkB4Hrja89AVsMY6Bt1fiQDxil/nrL50lW9P5BjZU=";
+        hash = "sha256-0FHE3HWLJvqygeHIp/0JQ9R0nS2Vux7S+r4ghCa9hpc=";
       };
 
       globalConfig = ''
diff --git a/modules/server/continuwuity.nix b/modules/server/continuwuity.nix
index 6ebd320..c67fa09 100644
--- a/modules/server/continuwuity.nix
+++ b/modules/server/continuwuity.nix
@@ -60,7 +60,6 @@
             max_request_size = 524288000;
             db_cache_capacity_mb = 2056;
 
-            query_over_tcp_only = true;
             dns_cache_entries = 0;
 
             allow_public_room_directory_over_federation = true;