Apple iOS Profile for Mullvad Encryted DNS (HTTPS)

mullvad-dns-mobile.mobileconfig

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
  "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>PayloadContent</key>
    <array>
      <dict>
        <!-- Use Mullvad Encrypted DNS (HTTPS) -->
        <key>DNSSettings</key>
        <dict>
          <key>DNSProtocol</key>
          <string>HTTPS</string>
          <key>ServerAddresses</key>
          <array>
            <string>2a07:e340::2</string>
            <string>194.242.2.2</string>
          </array>
          <key>ServerURL</key>
          <string>https://dns.mullvad.net/dns-query</string>
        </dict>

        <!-- Enable/disable this profile when certain rules are met. -->
        <key>OnDemandEnabled</key>
        <integer>1</integer>

        <!-- Rules are processed from top to bottom. First rule that matches is used. -->
        <key>OnDemandRules</key>
        <array>
          <!-- Disable when connected to specific WiFI networks. -->
          <dict>
            <key>InterfaceTypeMatch</key>
            <string>WiFi</string>
            <key>SSIDMatch</key>
            <array>
              <string>Inunu</string>
              <string>Intergraph</string>
            </array>
            <key>Action</key>
            <string>Disconnect</string>
          </dict>

          <!-- Enable when connected to other WiFI networks. -->
          <dict>
            <key>Action</key>
            <string>Connect</string>
            <key>InterfaceTypeMatch</key>
            <string>WiFi</string>
          </dict>

          <!-- Enable when connected to Cellular networks. -->
          <dict>
            <key>Action</key>
            <string>Connect</string>
            <key>InterfaceTypeMatch</key>
            <string>Cellular</string>
          </dict>

          <!-- Disable if not on WiFI or Cellular networks. -->
          <dict>
            <key>Action</key>
            <string>Disconnect</string>
          </dict>
        </array>
        <key>PayloadDescription</key>
        <string>Mullvad Encrypted DNS (HTTPS)</string>
        <key>PayloadDisplayName</key>
        <string>Mullvad Encrypted DNS (HTTPS)</string>
        <key>PayloadIdentifier</key>
        <string>
          com.apple.dnsSettings.managed.4A06FE90-FBD6-4603-8CEC-FD1C94BF304C
        </string>
        <key>PayloadType</key>
        <string>com.apple.dnsSettings.managed</string>
        <key>PayloadUUID</key>
        <string>4A06FE90-FBD6-4603-8CEC-FD1C94BF304C</string>
        <key>PayloadVersion</key>
        <integer>1</integer>
        <key>ProhibitDisablement</key>
        <false/>
      </dict>
    </array>
    <key>PayloadDescription</key>
    <string>Mullvad Encrypted DNS (HTTPS)</string>
    <key>PayloadDisplayName</key>
    <string>Mullvad Encrypted DNS (HTTPS)</string>
    <key>PayloadIdentifier</key>
    <string>com.paulmillr.apple-dns</string>
    <key>PayloadRemovalDisallowed</key>
    <false/>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>C1B95E85-C40A-4A0F-8C80-8B44C5478171</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
  </dict>
</plist>