From 47e51ee38b6fc0e91cebf99089e365fe21f5f463 Mon Sep 17 00:00:00 2001
From: Aminda Suomalainen <suomalainen+git@mikaela.info>
Date: Fri, 19 Apr 2024 08:48:57 +0300
Subject: [PATCH] firefox policy: use Quad9 ECS as TRR

---
 conf/librewolf.overrides.cfg       | 5 +++--
 etc/firefox/policies/policies.json | 2 +-
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/conf/librewolf.overrides.cfg b/conf/librewolf.overrides.cfg
index bc527b81..94a07dcf 100644
--- a/conf/librewolf.overrides.cfg
+++ b/conf/librewolf.overrides.cfg
@@ -112,8 +112,9 @@ pref("reader.parse-on-load.force-enabled", true);
 //pref("network.trr.mode", 2);
 defaultPref("network.trr.mode", 3);
 pref("network.trr.early-AAAA", true);
-defaultPref("network.trr.uri", "https://dns0.eu");
-//pref("network.trr.uri", "https://dns.adguard-dns.com/dns-query");
+//defaultPref("network.trr.uri", "https://dns0.eu");
+defaultPref("network.trr.uri"), "https://dns11.quad9.net/dns-query");
+//defaultPref("network.trr.uri", "https://dns.adguard-dns.com/dns-query");
 // NOTE: ECH requires TRR, so mode 2 may not use it.
 defaultPref("network.trr.disable-ECS", false);
 pref("network.dns.echconfig.enabled", true);
diff --git a/etc/firefox/policies/policies.json b/etc/firefox/policies/policies.json
index 0ccd47ae..af32cba2 100644
--- a/etc/firefox/policies/policies.json
+++ b/etc/firefox/policies/policies.json
@@ -25,7 +25,7 @@
     "DNSOverHTTPS": {
       "Enabled": true,
       "Locked": false,
-      "ProviderURL": "https://dns0.eu"
+      "ProviderURL": "https://dns11.quad9.net/dns-query"
     },
     "DisablePocket": false,
     "EnableTrackingProtection": {