- adguard needs manual setup and the install UI is exposed by default
- I would like to test DoH first, I suspect it's interfering with NTP
during boot (sysntpd needs to be restarted manually to work, strace
found that it can't resolve if started from init)
