# Default FastestInternetEver DNS configuration for desktop installer packages.
# DNS-over-TLS upstreams (DNSSEC validated by resolver).
# Agent replaces this with the rendered template at runtime.

.:53 {
    loop
    bufsize 1232
    hosts ~/Library/Application Support/FastestInternetEver/dns-cache-warm.hosts {
        ttl 3600
        reload 5s
        fallthrough
    }
    cache {
        prefetch 4
        success 1024
        denial 256
    }
    forward . tls://1.1.1.1%cloudflare-dns.com tls://8.8.8.8%dns.google tls://9.9.9.9%dns.quad9.net {
        max_concurrent 512
    }
    log
    errors
    health 127.0.0.1:8080
    ready
    reload 10s
}