diff --git a/tofu/flatcar-resolver.bu b/tofu/flatcar-resolver.bu
index 909e422..dc2df49 100644
--- a/tofu/flatcar-resolver.bu
+++ b/tofu/flatcar-resolver.bu
@@ -25,6 +25,12 @@ storage:
         inline: |
           nameserver 1.1.1.1
           nameserver 9.9.9.9
+    - path: /etc/systemd/resolved.conf.d/no-stub.conf
+      mode: 0644
+      contents:
+        inline: |
+          [Resolve]
+          DNSStubListener=no
     - path: /etc/systemd/network/00-eth0.network
       mode: 0644
       contents:
@@ -118,12 +124,6 @@ storage:
 
 systemd:
   units:
-    - name: systemd-resolved.service
-      dropins:
-        - name: no-stub.conf
-          contents: |
-            [Resolve]
-            DNSStubListener=no
     - name: docker.service
       enabled: true
     - name: unbound.service
diff --git a/tofu/flatcar-resolver2.bu b/tofu/flatcar-resolver2.bu
index 363f2e6..967f63a 100644
--- a/tofu/flatcar-resolver2.bu
+++ b/tofu/flatcar-resolver2.bu
@@ -25,6 +25,12 @@ storage:
         inline: |
           nameserver 1.1.1.1
           nameserver 9.9.9.9
+    - path: /etc/systemd/resolved.conf.d/no-stub.conf
+      mode: 0644
+      contents:
+        inline: |
+          [Resolve]
+          DNSStubListener=no
     - path: /etc/systemd/network/00-eth0.network
       mode: 0644
       contents:
@@ -118,12 +124,6 @@ storage:
 
 systemd:
   units:
-    - name: systemd-resolved.service
-      dropins:
-        - name: no-stub.conf
-          contents: |
-            [Resolve]
-            DNSStubListener=no
     - name: docker.service
       enabled: true
     - name: unbound.service