From a46efa62906aaa908a864a31c88c87adc4ce69b1 Mon Sep 17 00:00:00 2001
From: Pothi Kalimuthu <1254302+pothi@users.noreply.github.com>
Date: Tue, 20 Dec 2022 11:52:43 +0530
Subject: [PATCH] Add script to enable Cloudflare DoH

---
 doh-scripts/cloudflare.rsc | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 doh-scripts/cloudflare.rsc

diff --git a/doh-scripts/cloudflare.rsc b/doh-scripts/cloudflare.rsc
new file mode 100644
index 0000000..4e00783
--- /dev/null
+++ b/doh-scripts/cloudflare.rsc
@@ -0,0 +1,11 @@
+# Verify the connection at https://1.1.1.1/help
+
+/tool fetch url=https://curl.se/ca/cacert.pem
+/certificate remove [find name~"cacert.pem"]
+/certificate import file-name=cacert.pem passphrase=""
+
+/ip dns set use-doh-server=https://1.1.1.1/dns-query verify-doh-cert=yes 
+
+# optional steps
+/ip dns set servers=""
+/ip dhcp-client set use-peer-dns=no [find]