diff --git a/templates/desktop/network/enp1s0.network.j2 b/templates/desktop/network/enp1s0.network.j2
index 4c59786..0e8cf6a 100644
--- a/templates/desktop/network/enp1s0.network.j2
+++ b/templates/desktop/network/enp1s0.network.j2
@@ -8,8 +8,8 @@ Address={{ local_network_address }}
 Gateway={{ local_network_gateway }}
 DNS={{ local_network_dns }}
 MulticastDNS=yes
-DNSOverTLS=yes
-DNSSEC=yes
+DNSOverTLS=opportunistic
+DNSSEC=allow-downgrade
 DHCP=no
 LinkLocalAddressing=no
 IPv6AcceptRA=no
diff --git a/templates/htpc/network/enp1s0.network.j2 b/templates/htpc/network/enp1s0.network.j2
index af57302..c213788 100644
--- a/templates/htpc/network/enp1s0.network.j2
+++ b/templates/htpc/network/enp1s0.network.j2
@@ -8,8 +8,8 @@ Address={{ local_network_address }}
 Gateway={{ local_network_gateway }}
 DNS={{ local_network_dns }}
 MulticastDNS=yes
-DNSOverTLS=yes
-DNSSEC=yes
+DNSOverTLS=opportunistic
+DNSSEC=allow-downgrade
 DHCP=no
 LinkLocalAddressing=no
 IPv6AcceptRA=no
diff --git a/templates/p14/network/wlan0.network.j2 b/templates/p14/network/wlan0.network.j2
index 30d588b..1ce4825 100644
--- a/templates/p14/network/wlan0.network.j2
+++ b/templates/p14/network/wlan0.network.j2
@@ -3,8 +3,8 @@ Name={{ wireless_interface }}
 
 [Network]
 DNS={{ default_network_dns }}
-DNSOverTLS=yes
-DNSSEC=yes
+DNSOverTLS=opportunistic
+DNSSEC=allow-downgrade
 DHCP=yes
 IgnoreCarrierLoss=3s
 
diff --git a/templates/xps/network/wlan0-frans.network.j2 b/templates/xps/network/wlan0-frans.network.j2
index 8ff0b0d..9d80aca 100644
--- a/templates/xps/network/wlan0-frans.network.j2
+++ b/templates/xps/network/wlan0-frans.network.j2
@@ -9,8 +9,8 @@ Address={{ frans_network_address }}
 Gateway={{ frans_network_gateway }}
 DNS={{ frans_network_dns }}
 MulticastDNS=yes
-DNSOverTLS=yes
-DNSSEC=yes
+DNSOverTLS=opportunistic
+DNSSEC=allow-downgrade
 DHCP=no
 LinkLocalAddressing=no
 IPv6AcceptRA=no
diff --git a/templates/xps/network/wlan0-local.network.j2 b/templates/xps/network/wlan0-local.network.j2
index 880606c..27a5bd4 100644
--- a/templates/xps/network/wlan0-local.network.j2
+++ b/templates/xps/network/wlan0-local.network.j2
@@ -9,8 +9,8 @@ Address={{ local_network_address }}
 Gateway={{ local_network_gateway }}
 DNS={{ local_network_dns }}
 MulticastDNS=yes
-DNSOverTLS=yes
-DNSSEC=yes
+DNSOverTLS=opportunistic
+DNSSEC=allow-downgrade
 DHCP=no
 LinkLocalAddressing=no
 IPv6AcceptRA=no
diff --git a/templates/xps/network/wlan0.network.j2 b/templates/xps/network/wlan0.network.j2
index 30d588b..1ce4825 100644
--- a/templates/xps/network/wlan0.network.j2
+++ b/templates/xps/network/wlan0.network.j2
@@ -3,8 +3,8 @@ Name={{ wireless_interface }}
 
 [Network]
 DNS={{ default_network_dns }}
-DNSOverTLS=yes
-DNSSEC=yes
+DNSOverTLS=opportunistic
+DNSSEC=allow-downgrade
 DHCP=yes
 IgnoreCarrierLoss=3s