+#!/bin/bash
+# Copyright (C) 2019 Ian Kelling
+# SPDX-License-Identifier: AGPL-3.0-or-later
+source /a/bin/errhandle/err
+
+resolvuid=$(id -u systemd-resolve)
+case $EUID in
+ 0|$resolvuid) : ;;
+ *) exec sudo -E "${BASH_SOURCE[0]}" "$@" ;;
+esac
+
+
+if ! resolvectl dnsovertls tunfsf &>/dev/null; then
+ echo failed resolvectl dnsovertls tunfsf. rerunning:
+ resolvectl dnsovertls tunfsf
+ exit 0
+fi
+read _ link _ < <(resolvectl dnsovertls tunfsf)
+busctl call org.freedesktop.resolve1 /org/freedesktop/resolve1 org.freedesktop.resolve1.Manager SetLinkDNSOverTLS is $link no