diff --git a/helm-values/qbittorrent_values.yaml b/helm-values/qbittorrent_values.yaml
index 4547645..f08d8e8 100644
--- a/helm-values/qbittorrent_values.yaml
+++ b/helm-values/qbittorrent_values.yaml
@@ -76,6 +76,14 @@ gluetun:
       value: "10.160.17.207/32,fd7d:76ee:e68f:a993:61d7:a5fe:f834:90e1/128"
     - name: SERVER_COUNTRIES
       value: "Netherlands"
+    # AirVPN blocks outbound DNS-over-TLS (tcp/853), so gluetun's default
+    # DoT resolver never gets answers and the startup healthcheck loops
+    # forever on "lookup cloudflare.com: i/o timeout". Use AirVPN's pushed
+    # plaintext resolver instead (reached over the tunnel, no DNS leak).
+    - name: DOT
+      value: "off"
+    - name: DNS_ADDRESS
+      value: "10.128.0.1"
     - name: FIREWALL_INPUT_PORTS
       value: "8080"
     - name: FIREWALL_VPN_INPUT_PORTS