diff --git a/roles/wireguard/tasks/main.yml b/roles/wireguard/tasks/main.yml
index 1c3da2a..b18b2a4 100644
--- a/roles/wireguard/tasks/main.yml
+++ b/roles/wireguard/tasks/main.yml
@@ -19,10 +19,11 @@
 # Use systemd-resolved for DNS management (modern approach on all distributions)
 # Install systemd-resolvconf to provide resolvconf compatibility wrapper
 # "systemd-resolved" is prefered over "openresolv"
-- name: Install systemd-resolvconf
+- name: Install systemd-resolvconf (Debian only, built into systemd on Arch)
   ansible.builtin.package:
     name: systemd-resolvconf
     state: present
+  when: ansible_facts['os_family'] == 'Debian'
 
 - name: Ensure systemd-resolved is enabled and started
   ansible.builtin.systemd: