https://dns.sb/guide/doh/linux/
That's the way to do it to get dns over https for every apps (except maybe browser which do kind of what they want and don't go through but just google for disabling dns over https for your browser)
To get everything to use it you actually need a dns proxy. It'll receive all calls for DNS (nameserver 127.0.0.1 means apps ask dns on localhost) and will itself go search on the internet over https.