# /etc/coredns/Corefile

# forward DNS queries to quad9 using DoT
.:53 {
  any
  cache
  cancel
  forward . tls://9.9.9.10 tls://149.112.112.10 {
    tls_servername dns10.quad9.net
    health_check 60s
  }
}