You missed the part about IP set extras to resolve the DoH domains, and Hotplug extras to trigger IP set update at startup.