`coredns`

this repo contains configuration files for CoreDNS set up as a simple DNS over TLS (DoT) forwarding resolver, that is relying on a locally running dnscrypt-proxy instance for any and all queries.

since the systemd service runs under an unprivileged user (here coredns, which doesn't by default have access to /etc/letsencrypt), certs need to be supplied to coredns another way: copycerts_coredns.{path,service,timer}.