After installing 12.0-BETA1, on the first boot I noticed a warning about $local_unbound_tls not being set properly. It looks like that flag was only added recently by Dag-Erling, in "Add support for DNS-over-TLS to the local_unbound service." -- Rebecca