diff --git a/modules/systemd/default.nix b/modules/systemd/default.nix
index 5cc1b8c..09de947 100644
--- a/modules/systemd/default.nix
+++ b/modules/systemd/default.nix
@@ -13,6 +13,7 @@ in
   config = mkIf cfg.enable {
     services.resolved = {
       enable = true;
+      llmnr = "false"; # Deprecated and a security risk
     };
   };
 }