AdGuard Home app (addon) serving DoH - help!

I have had AdGuard Home running as an addon (now app) for a while. Its hosting DNS-over-TLS with no issues, i have certs all configured yada yada.

I’d like to get DNS-over-HTTPS (DoH) working too, but it just doesn’t seem to be listening. I set the port to 3001 (also tried 4433) since 443 is in use by nginx already. No plans to expose this to the internet.

I see it listening in the logs on https://dns.mydomain.ca:3001/dns-query, but the port appears closed. ports 53 and 853 are open.

What gives? DoH just broken right now?

(my goal here btw is to set a client ID on my kid’s windows machine so i can add stricter filters. Win11 only supports DoH, we have dynamic Ipv6 addresses so i can’t pin the IP to a client ID, and we aren’t using the AdGuard DHCP option so i can’t pin it to a mac address. DoH seems like the only method i can use to set a client ID, but open to suggestions there!)

The port that can be reached from outside are the ones set in the app configuration tabs. If there are ports not mapped there, you need to open an issue for that apps GitHub page.