diff --git a/README.md b/README.md
index 1f6ae49..abe430c 100644
--- a/README.md
+++ b/README.md
@@ -27,6 +27,7 @@ If you need even more privacy, check out [encrypted-dns over TOR](https://github
 | [AdGuard DNS Non-filtering][adguard-dns-unfiltered]  | 🇷🇺     | No         | Operated by AdGuard Software Ltd. Non-filtering                                                           | [HTTPS][adguard-dns-unfiltered-profile-https-signed], [TLS][adguard-dns-unfiltered-profile-tls-signed]       | [HTTPS][adguard-dns-unfiltered-profile-https], [TLS][adguard-dns-unfiltered-profile-tls]       |
 | [Alekberg Encrypted DNS][alekberg-dns]               | 🇳🇱     | No         | Independent                                                                                               | [HTTPS][alekberg-dns-profile-https-signed]                                                                   | [HTTPS][alekberg-dns-profile-https]                                                            |
 | [Aliyun Public DNS][aliyun-dns]                      | 🇨🇳     | No         | Operated by Alibaba Cloud Ltd.                                                                            | [HTTPS][aliyun-dns-profile-https-signed], [TLS][aliyun-dns-profile-tls-signed]                               | [HTTPS][aliyun-dns-profile-https], [TLS][aliyun-dns-profile-tls]                               |
+| [Archuser.org PubHole][archuser]                     | 🇺🇸     | Yes        | Independent. Blocks ads, tracking, and supports OpenNIC Domains. |  | [HTTPS][archuser-https], [TLS][archuser-tls]
 | [BlahDNS CDN Filtered][blahdns]                      | 🇺🇸     | Yes        | Independent. Blocks ads, tracking & malware                                                               | [HTTPS][blahdns-cdn-filtered-profile-https-signed]                                                           | [HTTPS][blahdns-cdn-filtered-profile-https]                                                    |
 | [BlahDNS CDN Unfiltered][blahdns]                    | 🇺🇸     | No         | Independent. Non-filtering                                                                                | [HTTPS][blahdns-cdn-unfiltered-profile-https-signed]                                                         | [HTTPS][blahdns-cdn-unfiltered-profile-https]                                                  |
 | [BlahDNS Finland][blahdns]                           | 🇫🇮     | Yes        | Independent. Blocks ads, tracking & malware                                                               | [HTTPS][blahdns-finland-profile-https-signed]                                                                | [HTTPS][blahdns-finland-profile-https]                                                         |
@@ -133,6 +134,9 @@ New-Guid
 [aliyun-dns]: https://www.alidns.com/
 [aliyun-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alibaba-https.mobileconfig
 [aliyun-dns-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alibaba-tls.mobileconfig
+[archuser]: https://pubhole.archuser.org
+[archuser-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/archuser-https.mobileconfig
+[archuser-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/archuser-tls.mobileconfig
 [blahdns]: https://blahdns.com/
 [blahdns-cdn-filtered-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-cdn-adblock-doh1.mobileconfig
 [blahdns-cdn-unfiltered-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-cdn-unfiltered-doh1.mobileconfig
diff --git a/profiles/archuser-https.mobileconfig b/profiles/archuser-https.mobileconfig
new file mode 100644
index 0000000..dfa282d
--- /dev/null
+++ b/profiles/archuser-https.mobileconfig
@@ -0,0 +1,53 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>PayloadContent</key>
+	<array>
+		<dict>
+			<key>DNSSettings</key>
+			<dict>
+				<key>DNSProtocol</key>
+				<string>HTTPS</string>
+				<key>ServerAddresses</key>
+				<array>
+					<string>2600:3c02::f03c:94ff:fe86:115d</string>
+					<string>66.228.61.140</string>
+				</array>
+				<key>ServerURL</key>
+				<string>https://doh.archuser.org/dns-query</string>
+			</dict>
+			<key>PayloadDescription</key>
+			<string>Configures device to use ArchUser's DNS over HTTPs</string>
+			<key>PayloadDisplayName</key>
+			<string>Archuser.org DNS Over HTTPs</string>
+			<key>PayloadIdentifier</key>
+			<string>com.apple.dnsSettings.managed.a7c9c22a-d313-4499-ad1b-3b4f6ed22134</string>
+			<key>PayloadType</key>
+			<string>com.apple.dnsSettings.managed</string>
+			<key>PayloadUUID</key>
+			<string>a643c2ab-2924-465d-8f2a-b894a7b76abd</string>
+			<key>PayloadVersion</key>
+			<integer>1</integer>
+			<key>ProhibitDisablement</key>
+			<false/>
+		</dict>
+	</array>
+	<key>PayloadDescription</key>
+	<string>Adds Archuser.org's PubHole DNS to the latest macOS and iOS systems</string>
+	<key>PayloadDisplayName</key>
+	<string>Archuser.org DNS over HTTPs</string>
+	<key>PayloadIdentifier</key>
+	<string>com.paulmillr.apple-dns</string>
+	<key>PayloadRemovalDisallowed</key>
+	<false/>
+	<key>PayloadType</key>
+	<string>Configuration</string>
+	<key>PayloadUUID</key>
+	<string>c87ca62d-c669-4ee9-92c4-2c3d96e9aadc</string>
+	<key>PayloadVersion</key>
+	<integer>1</integer>
+        <key>PayloadScope</key>
+        <string>System</string>
+</dict>
+</plist>
diff --git a/profiles/archuser-tls.mobileconfig b/profiles/archuser-tls.mobileconfig
new file mode 100644
index 0000000..53a8751
--- /dev/null
+++ b/profiles/archuser-tls.mobileconfig
@@ -0,0 +1,53 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>PayloadContent</key>
+	<array>
+		<dict>
+			<key>DNSSettings</key>
+			<dict>
+				<key>DNSProtocol</key>
+				<string>TLS</string>
+				<key>ServerAddresses</key>
+				<array>
+					<string>2600:3c02::f03c:94ff:fe86:115d</string>
+					<string>66.228.61.140</string>
+				</array>
+				<key>ServerName</key>
+				<string>doh.archuser.org</string>
+			</dict>
+			<key>PayloadDescription</key>
+			<string>Configures device to use ArchUser's DNS over TLS</string>
+			<key>PayloadDisplayName</key>
+			<string>Archuser.org DNS over TLS</string>
+			<key>PayloadIdentifier</key>
+			<string>com.apple.dnsSettings.managed.f1109887-ce9e-47bb-b751-fa2e2356691c</string>
+			<key>PayloadType</key>
+			<string>com.apple.dnsSettings.managed</string>
+			<key>PayloadUUID</key>
+			<string>0c93de73-7828-4d5e-83dd-1249a42ba225</string>
+			<key>PayloadVersion</key>
+			<integer>1</integer>
+			<key>ProhibitDisablement</key>
+			<false/>
+		</dict>
+	</array>
+	<key>PayloadDescription</key>
+	<string>Adds Archuser.org's PubHole DNS to the latest macOS and iOS systems</string>
+	<key>PayloadDisplayName</key>
+	<string>ArchUser.org DNS over TLS</string>
+	<key>PayloadIdentifier</key>
+	<string>com.paulmillr.apple-dns</string>
+	<key>PayloadRemovalDisallowed</key>
+	<false/>
+	<key>PayloadType</key>
+	<string>Configuration</string>
+	<key>PayloadUUID</key>
+	<string>864d8cf9-01bb-4424-a7da-93c77fbd9613</string>
+	<key>PayloadVersion</key>
+	<integer>1</integer>
+        <key>PayloadScope</key>
+        <string>System</string>
+</dict>
+</plist>