diff --git a/roles/dns/tasks/ubuntu.yml b/roles/dns/tasks/ubuntu.yml
index c9c23400..072f8bb6 100644
--- a/roles/dns/tasks/ubuntu.yml
+++ b/roles/dns/tasks/ubuntu.yml
@@ -98,3 +98,13 @@
   notify:
     - daemon-reload
     - restart dnscrypt-proxy
+
+- name: Ubuntu | Disable dnscrypt-proxy socket activation
+  systemd:
+    name: dnscrypt-proxy.socket
+    state: stopped
+    enabled: false
+    masked: true
+  failed_when: false
+  notify:
+    - restart dnscrypt-proxy