diff --git a/templates/unbound.conf.j2 b/templates/unbound.conf.j2
index 80fd96f..9ac585c 100644
--- a/templates/unbound.conf.j2
+++ b/templates/unbound.conf.j2
@@ -31,4 +31,10 @@ server:
     master: {{ server.nsd_addr }}@{{ server.nsd_port }}
   {% endfor %}
 
+  forward-zone:
+    name: "."
+    forward-host: dns.google#853
+    forward-tls-upstream: yes
+
+
 # vim: set syntax=yaml et sw=0 ts=2 sts=0: