diff --git a/modules/nixos/networking/default.nix b/modules/nixos/networking/default.nix
index 24f8ac3..25f3093 100644
--- a/modules/nixos/networking/default.nix
+++ b/modules/nixos/networking/default.nix
@@ -36,4 +36,17 @@ in
       readOnly = true;
     };
   };
+
+  config = {
+    networking = {
+      useNetworkd = true;
+      useDHCP = false;
+    };
+
+    services.resolved = {
+      enable = true;
+      dnssec = "allow-downgrade";
+      dnsovertls = "opportunistic";
+    };
+  };
 }
diff --git a/modules/nixos/networking/underlay.nix b/modules/nixos/networking/underlay.nix
index 94f7401..480f0ee 100644
--- a/modules/nixos/networking/underlay.nix
+++ b/modules/nixos/networking/underlay.nix
@@ -40,11 +40,6 @@ in
 
   config = lib.mkMerge [
     {
-      networking = {
-        useNetworkd = true;
-        useDHCP = false;
-      };
-
       systemd.network = {
         enable = true;
         networks."10-${cfg.interface}" = {
@@ -59,12 +54,6 @@ in
           };
         };
       };
-
-      services.resolved = {
-        enable = true;
-        dnssec = "allow-downgrade";
-        dnsovertls = "opportunistic";
-      };
     }
 
     (lib.mkIf cfg.wireless.enable {