This is the way. Added Unbound as my upstream DNS server in recursive mode for extra privacy!