docker logs gluetun

returns:

...
[dns] using plaintext DNS at address 1.1.1.1
...

When using the DOT functionality, the logs say [dns] using plaintext DNS at address 1.1.1.1.

• Is this just a misleading log statement?
• Is it failing to use DNS over TLS and falling back to plaintext?

Despite the fallback DNS message, from the container it could not resolve that address, but explicitly setting

DNS_ADDRESS=1.1.1.1
DOT=off

Fixed my issue.