unbound.service.d: add fedora-network-pre.conf

This reverts commit e9998f4079a274182ec25bdb9a6ae17f7f42b7a0.

etc/systemd/system/unbound.service.d/fedora-network-pre.conf

@@ -0,0 +1,11 @@
+# This override attempts to ensure Unbound is running when network gets
+# connected as opposed to starting at that time to ensure DNS functions for
+# everything dependent on DNS in addition to just internet connectivity
+[Unit]
+After=
+# Copy-pasted from Fedora (systemtl show unbound.service) except
+# network-online.target is network-pre.target
+After=unbound-keygen.service unbound-anchor.service systemd-journald.socket sysinit.target network-pre.target system.slice basic.target
+
+[Install]
+WantedBy=multi-user.target network-online.target

etc/unbound/unbound.conf.d/dns-over-tls.conf

@@ -0,0 +1,29 @@
+server:
+	# Debian ca-certificates location
+	tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt
+	# Fedora location
+	#tls-cert-bundle: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
+
+# This list is for my travel laptop to have at least one DoT443 server
+# which seems to be applied-privacy.net. They advice having multiple DoT servers
+# for redundancy and as they don't filter, it's best I use other non-filtering ones.
+
+forward-zone:
+	name: "."
+	forward-tls-upstream: yes
+
+	# https://appliedprivacy.net/services/dns/ - Vienna, Austria
+	forward-addr: 2a02:1b8:10:234::2@443#dot1.applied-privacy.net
+	forward-addr: 146.255.56.98@443#dot1.applied-privacy.net
+
+	# https://www.dns0.eu/open https://www.dns0.eu/network - French based. Private ECS
+	forward-addr: 193.110.81.254@853#open.dns0.eu
+	forward-addr: 185.253.5.254@853#open.dns0.eu
+	forward-addr: 2a0f:fc80::ffff@853#open.dns0.eu
+	forward-addr: 2a0f:fc81::ffff@853#open.dns0.eu
+
+	# Adguard DNS Unfiltered Anycast. Malta based. Private ECS.
+	forward-addr: 2a10:50c0::1:ff@853#unfiltered.adguard-dns.com
+	forward-addr: 2a10:50c0::2:ff@853#unfiltered.adguard-dns.com
+	forward-addr: 94.140.14.140@853#unfiltered.adguard-dns.com
+	forward-addr: 94.140.14.141@853#unfiltered.adguard-dns.com