I want to make sure I’m appropriately using encrypted DNS requests from the Brume. If choosing NextDNS or Cloudflare, the settings are straight forward and obvious. No problem. However, when using AdGuard Home I find the DNS settings confusing. Do I need to put an encrypted DNS server in the “UPSTREAM” settings? For example “tls://1dot1dot1dot1.cloudflare-dns.com” or “https://dns-unfiltered.adguard.com/dns-query”?
Do I need to put an encrypted DNS server in the “Bootstrap” settings?
Some guidance as to the appropriate choices for UPSTREAM and BOOTSTRAP DNS servers would be greatly appreciated. I just want to make sure DNS requests made through the Brume are encrypted. Thank you.