Unbound .conf file that uses Unbound to prefer DoT with fallback to recursive, dual stack, with caching

https://github.com/upmcplanetracker/firewalla-unbound-DoT-config

Basically what it does the best of both worlds -- it'll use DNS over TLS (ie encrypted) for your DNS requests to whatever servers you want (right now I have google, cloudflare, and quad9, but you can put in whatever you want and as many as you want) and if that fails it'll fall back to Unbound as a recursive server.

Unbound is smart enough to use the DNS service and the protocol (IPv4 or IPv6) that gives the quickest results.

There is also in the .conf file a way to adjust cache with instructions on how to do this without messing up / stressing out your firewalla. the bigger the cache, the quicker the DNS resolving by your firewalla/unbound. Too big and you really stress out your Firewalla as it has a finite amount of memory. Use with caution.

If anyone has any suggestions, lmk. Firewalla includes a pretty old version of Unbound, and it seems that even options that should work on the version that Firewalla uses doesn't always work, so it was a lot of trial and error seeing what options made Unbound not work vs. which ones did.