This tool constantly checks your systemd-resolved. It always forces DNS-over-TLS. However, if DNS-over-TLS access is blocked on your network, it starts using the DNSCrypt protocol. But if that also fails, it fallsbacks to your local DNS.
You can install it as follows.
curl -fsSL https://raw.github.com/keift/dnsd/refs/heads/main/install.sh | sudo bashYou can uninstall it as follows.
curl -fsSL https://raw.github.com/keift/dnsd/refs/heads/main/uninstall.sh | sudo bash