diff --git a/config/includes.chroot/etc/NetworkManager/dnsmasq.d/options b/config/includes.chroot/etc/NetworkManager/dnsmasq.d/options
new file mode 100644
index 0000000..8cd0de8
--- /dev/null
+++ b/config/includes.chroot/etc/NetworkManager/dnsmasq.d/options
@@ -0,0 +1,13 @@
+# Enable DNSSec
+#conf-file=/usr/share/dnsmasq-base/trust-anchors.conf
+#dnssec
+
+# Use custom forwarders instead of the name server acquired by DHCP
+#server=1.2.3.4
+#server=2.3.4.5
+
+# Force using resolvers in the specified order instead of "intelligently"
+#strict-order
+
+# Delegate resolution of a specific domain to libvirt's dnsmasq service
+#server=/mydomain.host/10.0.0.1