NGINX with DNS over TLS = only localhost

Exactly!

I see there is already a feature request going on. Lets move the discussion to there.