Add cert_mode to know when to gen or pull certs

server/private/dns.ts

@@ -17,14 +17,8 @@ import { privateConfig } from "#private/lib/config";
 let dnsServer: AuthoritativeDNSServer | undefined;
 
 export async function startDnsServer() {
-    const use_pangolin_dns =
-        privateConfig.getRawPrivateConfig().flags.use_pangolin_dns;
-    if (!use_pangolin_dns) {
-        return;
-    }
-
     const dnsConfig = privateConfig.getRawPrivateConfig().dns;
-    if (!dnsConfig) {
+    if (!dnsConfig || !dnsConfig.enabled) {
         return;
     }