diff --git a/hosts/chunk/default.nix b/hosts/chunk/default.nix
index 09b91f7..38fbaeb 100644
--- a/hosts/chunk/default.nix
+++ b/hosts/chunk/default.nix
@@ -135,12 +135,6 @@
     address = "31.59.129.1";
     interface = "ens18";
   };
-  networking.nameservers = [
-    "127.0.0.1"
-    "::1"
-  ];
-
-  time.timeZone = "America/Toronto";
 
   i18n.defaultLocale = "en_US.UTF-8";
   console = {
diff --git a/hosts/common.nix b/hosts/common.nix
index 51a9706..100c6ec 100644
--- a/hosts/common.nix
+++ b/hosts/common.nix
@@ -26,6 +26,13 @@
   };
   time.timeZone = "America/Toronto";
   networking.firewall.logRefusedConnections = false;
+  networking.nameservers = [
+    # quad9
+    "2620:fe::fe"
+    "2620:fe::9"
+    "9.9.9.9"
+    "149.112.112.112"
+  ];
 
   # this is true by default and mutually exclusive with
   # programs.nix-index
diff --git a/hosts/ytnix/default.nix b/hosts/ytnix/default.nix
index a3b4bb6..016582b 100644
--- a/hosts/ytnix/default.nix
+++ b/hosts/ytnix/default.nix
@@ -84,10 +84,6 @@
       dns = "none";
       wifi.backend = "iwd";
     };
-    nameservers = [
-      "31.59.129.225"
-      "2a0f:85c1:840:2bfb::1"
-    ];
     resolvconf.enable = true;
     firewall = {
       allowedUDPPorts = [ 51820 ]; # for wireguard