diff --git a/data/location/azure_euwest.yaml b/data/location/azure_euwest.yaml
index 1a778518..649f0870 100644
--- a/data/location/azure_euwest.yaml
+++ b/data/location/azure_euwest.yaml
@@ -1,3 +1,4 @@
 ---
 dns::forwarders:
   - 168.63.129.16
+dns::forwarder_insecure: false
diff --git a/data/location/inria_paris.yaml b/data/location/inria_paris.yaml
index 34a17203..fe2b00bd 100644
--- a/data/location/inria_paris.yaml
+++ b/data/location/inria_paris.yaml
@@ -1,13 +1,14 @@
 ---
 dns::forwarders:
   - 128.93.77.234
+dns::forwarder_insecure: false
 
 smtp::relayhost: '[smtp.inria.fr]'
 
 users:
   seirl:
     groups:
       - sudo
   morane:
     groups:
       - sudo
diff --git a/data/location/sesi_rocquencourt.yaml b/data/location/sesi_rocquencourt.yaml
index 2a337781..81f61097 100644
--- a/data/location/sesi_rocquencourt.yaml
+++ b/data/location/sesi_rocquencourt.yaml
@@ -1,11 +1,12 @@
 ---
 dns::forwarders:
   - 193.51.196.130
   - 193.51.196.131
+dns::forwarder_insecure: true
 
 ntp::servers:
   - sesi-ntp1.inria.fr
   - sesi-ntp2.inria.fr
 
 smtp::relayhost: '[smtp.inria.fr]'