diff --git a/hosts/falkenstein-1/modules/nginx/default.nix b/hosts/falkenstein-1/modules/nginx/default.nix
index 8c74006..ed95187 100644
--- a/hosts/falkenstein-1/modules/nginx/default.nix
+++ b/hosts/falkenstein-1/modules/nginx/default.nix
@@ -1,7 +1,14 @@
-{ config, ... }:
+{ ... }:
 {
   networking.firewall.allowedTCPPorts = [ 80 443 ];
-  services.nginx.enable = true;
+  services.nginx = {
+    enable = true;
+    recommendedTlsSettings = true;
+    recommendedProxySettings = true;
+    recommendedGzipSettings = true;
+    recommendedZstdSettings = true; 
+    recommendedOptimisation = true;
+  };
   security.acme = {
     acceptTerms = true;
     defaults = {
diff --git a/hosts/nuc/modules/nginx/default.nix b/hosts/nuc/modules/nginx/default.nix
index 8c74006..ed95187 100644
--- a/hosts/nuc/modules/nginx/default.nix
+++ b/hosts/nuc/modules/nginx/default.nix
@@ -1,7 +1,14 @@
-{ config, ... }:
+{ ... }:
 {
   networking.firewall.allowedTCPPorts = [ 80 443 ];
-  services.nginx.enable = true;
+  services.nginx = {
+    enable = true;
+    recommendedTlsSettings = true;
+    recommendedProxySettings = true;
+    recommendedGzipSettings = true;
+    recommendedZstdSettings = true; 
+    recommendedOptimisation = true;
+  };
   security.acme = {
     acceptTerms = true;
     defaults = {
diff --git a/hosts/thinkpad/modules/networks/default.nix b/hosts/thinkpad/modules/networks/default.nix
index 6018281..c14ef68 100644
--- a/hosts/thinkpad/modules/networks/default.nix
+++ b/hosts/thinkpad/modules/networks/default.nix
@@ -107,6 +107,9 @@
     };
     networks."30-dorm" = {
       matchConfig.Name = "dorm";
+      networkConfig = {
+        DNS = "192.168.10.1";
+      };
       addresses = [
         {
           addressConfig = {