<form>
    <field>
        <id>dot.enabled</id>
        <label>Enabled</label>
        <type>checkbox</type>
        <help>Enable or disable this server.</help>
    </field>
    <field>
        <id>dot.domain</id>
        <label>Domain</label>
        <type>text</type>
        <help>
            If a domain is entered here, queries for this specific domain will be forwarded to the specified server.
            Leave blank to forward all queries to the specified server (default).
        </help>
    </field>
    <field>
        <id>dot.server</id>
        <label>Server IP</label>
        <type>text</type>
        <help>IP address of DNS server to forward all requests.</help>
    </field>
    <field>
        <id>dot.port</id>
        <label>Server Port</label>
        <type>text</type>
        <help>Port of DNS server, for usual DNS use 53, if you use DoT set it to 853.</help>
    </field>
    <field>
        <id>dot.verify</id>
        <label>Verify CN</label>
        <type>text</type>
        <help>
            The Common Name of the DNS server (e.g. dns.example.com). This field is required to verify its TLS certificate.
            DNS-over-TLS is susceptible to man-in-the-middle attacks unless certificates can be verified.
            Leave empty to accept self-signed yet also potentially fraudulent certificates.
        </help>
    </field>
</form>
