Run on a Windows PC on the LAN you want to test (PowerShell 5.1+):
irm https://scripts.dot-files.xyz/dns/bootstrap.ps1 | iex
Optional overrides - set the env var(s) first:
$env:DNS_LOCAL='192.168.1.1'; irm https://scripts.dot-files.xyz/dns/bootstrap.ps1 | iex
DNS_LOCAL = internal resolver IP (else auto-detected) ·
DNS_BLOCKED = a domain your resolver should block ·
DNS_TOOLS=1 = also fetch dnslookup + an HTTP/3 curl.
The script is hash-pinned: the bootstrap refuses to run if test.ps1 does not
match the published checksum.