diff --git a/roles/networking/files/dns.conf b/roles/networking/files/dns.conf
index 19ff94b20423df810dc1f04da2c130fda75ce6b4..84026a6e61472250920edd847acb0f50d64866fc 100644
--- a/roles/networking/files/dns.conf
+++ b/roles/networking/files/dns.conf
@@ -12,4 +12,7 @@ DNS=1.1.1.1#cloudflare-dns.com
 DNS=1.0.0.1#cloudflare-dns.com
 DNS=2606:4700:4700::1111#cloudflare-dns.com
 DNS=2606:4700:4700::1001#cloudflare-dns.com
-DNSOverTLS=true
+
+# DoT disabled until systemd 251
+# https://github.com/systemd/systemd/pull/22132
+#DNSOverTLS=true