From 4ccc2a21388dfcb632d52f26a7129a4a3aea5b24 Mon Sep 17 00:00:00 2001
From: Stanislav Chzhen <s.chzhen@adguard.com>
Date: Tue, 22 Apr 2025 20:31:15 +0300
Subject: [PATCH] Pull request 2398: 7781-fix-serve-plain-dns

Updates #7781.

Squashed commit of the following:

commit 5dff0be1763e7da7dd655bf1e34dfa8402ad96e8
Author: Stanislav Chzhen <s.chzhen@adguard.com>
Date:   Tue Apr 22 18:15:42 2025 +0300

    home: fix serve plain dns
---
 internal/home/dns.go | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/internal/home/dns.go b/internal/home/dns.go
index 579efb47..eff257d1 100644
--- a/internal/home/dns.go
+++ b/internal/home/dns.go
@@ -347,13 +347,6 @@ func newDNSTLSConfig(
 		return nil, fmt.Errorf(format, err)
 	}
 
-	// Unencrypted DoH is managed by AdGuard Home itself, not by dnsproxy.
-	// Therefore, avoid setting the certificate property to prevent dnsproxy
-	// from starting encrypted listeners.  See [dnsforward.Server.prepareTLS].
-	if conf.AllowUnencryptedDoH {
-		return dnsConf, nil
-	}
-
 	dnsConf.Cert = &cert
 
 	return dnsConf, nil