diff --git a/etc/firefox/policies/policies.json b/etc/firefox/policies/policies.json
index 4f60d384..a70d6b0b 100644
--- a/etc/firefox/policies/policies.json
+++ b/etc/firefox/policies/policies.json
@@ -91,7 +91,8 @@
       ],
       "Fallback": false,
       "Locked": false,
-      "ProviderURL": "https://dns.quad9.net/dns-query"
+      "ProviderURL": "https://dns0.eu/",
+      "ProviderURL_outside_europe_aminda_comment": "Swap to https://unfiltered.adguard-dns.com/dns-query if device is expected to cross continents from Europe?"
     },
     "DisableEncryptedClientHello": false,
     "DisablePocket": true,
diff --git a/rc/curlrc b/rc/curlrc
index 1f33cff7..f41b02f6 100644
--- a/rc/curlrc
+++ b/rc/curlrc
@@ -1,12 +1,16 @@
 # ~/.curlrc
 
-# DNS-over-HTTPS (maybe HTTP/3, I don't know)
-#
 # https://dns0.eu - Anycast with servers in the EU. Private ECS.
-#doh-url = https://dns0.eu/
-#
+doh-url = https://dns0.eu/
+#doh-url = https://open.dns0.eu/
+
+# https://adguard-dns.io - anycast with servers in multiple continents,
+# private ECS
+#doh-url = https://unfiltered.adguard-dns.com/dns-query
+
+
 # https://quad9.net - Anycast, no ECS
-doh-url = https://dns.quad9.net/dns-query
+#doh-url = https://dns.quad9.net/dns-query
 # ECS
 #doh-url = https://dns11.quad9.net/dns-query