net.listen('127.0.0.50', 53, { kind = 'dns', freebind = true })

-- Load useful modules
modules = {
	'hints > iterate',  -- Allow loading /etc/hosts or custom root hints
	'stats',            -- Track internal statistics
	'predict',          -- Prefetch expiring/frequent records
}

-- Forward requests to those resolvers over TLS
policy.TLS_FORWARD({
	-- UncensoredDNS <https://blog.uncensoreddns.org/>
	{'2a01:3a0:53:53::', hostname='unicast.uncensoreddns.org'},
	{'89.233.43.71',     hostname='unicast.uncensoreddns.org'},
	{'2001:67c:28a4::',  hostname='anycast.uncensoreddns.org'},
	{'91.239.100.100',   hostname='anycast.uncensoreddns.org'},
})

cache.size = 100 * MB