diff --git a/modules/services/unbound.nix b/modules/services/unbound.nix
index 6976551..2b7c3ca 100644
--- a/modules/services/unbound.nix
+++ b/modules/services/unbound.nix
@@ -28,10 +28,10 @@ in {
           "10.0.0.0/8       allow"
           "192.168.100.0/24 allow"
         ];
-        domain-insecure = [ "local.lava.moe" ];
-        local-zone = [ "local.lava.moe. redirect" ];
+        domain-insecure = [ "\"local.lava.moe\"" ];
+        local-zone = [ "\"local.lava.moe.\" redirect" ];
         local-data = [
-          "warden.local.lava.moe. IN A 192.168.100.15"
+          "\"warden.local.lava.moe. IN A 192.168.100.15\""
         ];
       };