I ensure that my home lab has clients on my internal network, which are responsive and not exposed externally.

However, I did want to use encrypted DNS so I plan to use systemd-resolved as the resolver for DNS (looks like it supports DNS over TLS). As of right now I don't plan on setting up VLANs (I have a ...