diff --git a/data/conf/rspamd/local.d/options.inc b/data/conf/rspamd/local.d/options.inc
new file mode 100644
index 00000000..87dc8770
--- /dev/null
+++ b/data/conf/rspamd/local.d/options.inc
@@ -0,0 +1,3 @@
+dns {
+    enable_dnssec = true;
+}