diff --git a/nix/nixos-module/container/dnscache.nix b/nix/nixos-module/container/dnscache.nix
index bed1cf5..96b28db 100644
--- a/nix/nixos-module/container/dnscache.nix
+++ b/nix/nixos-module/container/dnscache.nix
@@ -91,6 +91,8 @@ lib.mkIf config.site.hosts.${hostName}.services.dnscache.enable {
           interval = 86400,  -- seconds
         }
       })
+
+      trust_anchors.set_insecure({'dn42', 'd.f.ip6.arpa', 'ffdd'})
     '';
   };
 }