diff --git a/modules/services/networking/unbound.nix b/modules/services/networking/unbound.nix
index 3c35c0c1dd5..fb75b4ed069 100644
--- a/modules/services/networking/unbound.nix
+++ b/modules/services/networking/unbound.nix
@@ -32,9 +32,10 @@ let
         pidfile: "${stateDir}/unbound.pid"
         verbosity: 1      # uncomment and increase to get more logging.
         # listen on all interfaces, answer queries from the local subnet.
-        ${interfaces}
-        ${access}
-        ${forward}
+      ${interfaces}
+      ${access}
+      ${forward}
+      ${cfg.extraConfig}
     '';
 
 in
@@ -75,6 +76,13 @@ in
         ";
       };
 
+      extraConfig = mkOption {
+        default = "";
+        description = "
+          Extra unbound config
+        ";
+      };
+
     };
 
   };