diff --git a/nixos/modules/wireguard-client.nix b/nixos/modules/wireguard-client.nix
index fcf2b20..d816d4e 100644
--- a/nixos/modules/wireguard-client.nix
+++ b/nixos/modules/wireguard-client.nix
@@ -31,6 +31,7 @@ in
       wg0 = {
         # Determines the IP address and subnet of the client's end of the tunnel interface.
         address = [ cfg.ip ];
+        dns = [ "10.20.30.1" ];
 
         listenPort = serverPort; # to match firewall allowedUDPPorts (without this wg uses random port numbers)