Windows 11: How To Configure Secure DNS (DoH) for All WiFi Networks

This post explains how to configure DNS over HTTPS (DoH) for all WiFi networks in Windows 11 via the Settings app. Unfortunately, this is less intuitive than it should be; I need a reminder every time I connect to the German railway’s WiFiOnIce, which only seems to work with Deutsche Bahn’s (insecure) DNS server (you can switch to more secure DNS servers once you’ve accepted the terms on their captive portal).
Networking