[Resolve]
DNSSEC=allow-downgrade
DNSOverTLS=opportunistic
Cache=true