diff --git a/.swo b/.swo
new file mode 100644
index 0000000..e5db3b8
Binary files /dev/null and b/.swo differ
diff --git a/.swp b/.swp
new file mode 100644
index 0000000..ed92b17
Binary files /dev/null and b/.swp differ
diff --git a/build/Dockerfile b/build/Dockerfile
index bb74349..a56d0b9 100644
--- a/build/Dockerfile
+++ b/build/Dockerfile
@@ -1,5 +1,6 @@
 FROM alpine
 RUN apk add --no-cache --update unbound ca-certificates
+COPY certs/a.cyberiadot.invalid.pem /usr/local/share/ca-certificates/a.cyberiadot.invalid.pem
 RUN update-ca-certificates
 ADD unbound.conf /etc/unbound/unbound.conf
 ENTRYPOINT ["unbound", "-c", "/etc/unbound/unbound.conf"]
diff --git a/build/certs/a.cyberiadot.invalid.pem b/build/certs/a.cyberiadot.invalid.pem
new file mode 100644
index 0000000..da466be
--- /dev/null
+++ b/build/certs/a.cyberiadot.invalid.pem
@@ -0,0 +1,28 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/build/unbound.conf b/build/unbound.conf
index 69846ab..13fa7b7 100644
--- a/build/unbound.conf
+++ b/build/unbound.conf
@@ -23,7 +23,7 @@ server:
 forward-zone:
 	name: "."
 	forward-tls-upstream: yes
+	forward-addr: 2a04:c44:e00:32e0:42a:30ff:fe00:e7d@853#a.cyberiadot.invalid
+	forward-addr: 194.182.165.153@853#a.cyberiadot.invalid
 	forward-addr: 2620:fe::fe@853#dns.quad9.net
 	forward-addr: 9.9.9.9@853#dns.quad9.net
-	forward-addr: 2606:4700:4700::1111@853#cloudflare-dns.com
-	forward-addr: 1.1.1.1@853#cloudflare-dns.com