diff --git a/src/initscripts/system/unbound b/src/initscripts/system/unbound
index 3b4da1dff..41117904f 100644
--- a/src/initscripts/system/unbound
+++ b/src/initscripts/system/unbound
@@ -690,6 +690,9 @@ setup_safe_search() {
 	# Bing
 	unbound-control local_data "bind.com CNAME strict.bing.com."
 
+	# DuckDuckGo
+	unbound-control local_data "duckduckgo.com CNAME safe.duckduckgo.com."
+
 	# Google
 	for domain in ${GOOGLE_TLDS[@]}; do
 		unbound-control local_data "${domain} CNAME forcesafesearch.google.com."