diff --git a/dnsmasq/Dockerfile b/dnsmasq/Dockerfile
index 083c1f7..92a8acf 100644
--- a/dnsmasq/Dockerfile
+++ b/dnsmasq/Dockerfile
@@ -7,7 +7,7 @@ FROM alpine
 MAINTAINER kev <norelply@easypi.pro>
 
 RUN set -xe \
-    && apk add --no-cache dnsmasq \
+    && apk add --no-cache dnsmasq-dnssec \
     && echo "conf-dir=/etc/dnsmasq.d/,*.conf" >> /etc/dnsmasq.conf
 
 VOLUME /etc/dnsmasq.d
diff --git a/dnsmasq/dnsmasq.d/dnssec.conf b/dnsmasq/dnsmasq.d/dnssec.conf
new file mode 100644
index 0000000..c754be4
--- /dev/null
+++ b/dnsmasq/dnsmasq.d/dnssec.conf
@@ -0,0 +1,2 @@
+# dnssec
+# conf-file=/usr/share/dnsmasq/trust-anchors.conf