diff --git a/common/pia.nix b/common/pia.nix
index 3ed84ef..a127c18 100644
--- a/common/pia.nix
+++ b/common/pia.nix
@@ -88,8 +88,8 @@ disable-occ
 auth-user-pass /run/secrets/pia-login.conf
           '';
           autoStart = true;
-          up = "echo nameserver $nameserver | ${pkgs.openresolv}/sbin/resolvconf -m 0 -a $dev";
-          down = "${pkgs.openresolv}/sbin/resolvconf -d $dev";
+#          up = "echo nameserver $nameserver | ${pkgs.openresolv}/sbin/resolvconf -m 0 -a $dev";
+#          down = "${pkgs.openresolv}/sbin/resolvconf -d $dev";
         };
       };
     };
diff --git a/common/server/drastikbot.nix b/common/server/drastikbot.nix
index 2952a02..d4a5d53 100644
--- a/common/server/drastikbot.nix
+++ b/common/server/drastikbot.nix
@@ -68,7 +68,7 @@ in {
       enable = true;
       after = ["network.target"];
       wantedBy = ["multi-user.target"];
-      serviceConfig.ExecStart = "${drastikbot}/drastikbot -c ${cfg.dataDir}";
+      serviceConfig.ExecStart = "sleep 5 && ${drastikbot}/drastikbot -c ${cfg.dataDir}";
       serviceConfig.User = cfg.user;
       serviceConfig.Group = cfg.group;
       preStart = ''
diff --git a/machines/liza/configuration.nix b/machines/liza/configuration.nix
index 894b7e4..17516db 100644
--- a/machines/liza/configuration.nix
+++ b/machines/liza/configuration.nix
@@ -156,6 +156,10 @@ in {
         pia.enable = true;
         nixpkgs.pkgs = pkgs;
 
+        # run it's own DNS resolver
+        networking.useHostResolvConf = false;
+        services.resolved.enable = true;
+
         services.drastikbot.enable = true;
         services.radio = {
           enable = true;