Unbound DNS over TLS Configuration

dns.conf

server:
  tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt

forward-zone:
  name: "."

# cloudflare
  forward-addr: 1.1.1.1@853
  forward-addr: 1.0.0.1@853
  forward-addr: 2606:4700:4700::1111@853
  forward-addr: 2606:4700:4700::1001@853
#surfnet
  forward-addr: 145.100.185.15@853
  forward-addr: 2001:610:1:40ba:145:100:185:15@853
  forward-addr: 145.100.185.16@853
  forward-addr: 2001:610:1:40ba:145:100:185:16@853
#getdnsapi
  forward-addr: 185.49.141.37@853
  forward-addr: 2a04:b900:0:100::37@853
#unsensoreddns
  forward-addr: 89.233.43.71@853
  forward-addr: 2a01:3a0:53:53::0@853

#enable tls transport
  forward-ssl-upstream: yes