shrmnk

1. Install cloudflared
2. Create /etc/systemd.system/cloudflared-proxy-dns.service with contents:

[Unit]
Description=DNS over HTTPS (DoH) proxy client
Wants=network-online.target nss-lookup.target
Before=nss-lookup.target

[Service]
AmbientCapabilities=CAP_NET_BIND_SERVICE