diff --git a/encrypted-dns.toml b/encrypted-dns.toml
index a53fe7e..b95fd1a 100644
--- a/encrypted-dns.toml
+++ b/encrypted-dns.toml
@@ -20,9 +20,10 @@ listen_addrs = [
     { local = "[::]:443",       external = "[2001:db8::1]:443" }
 ]
 
-## IP address to connect to upstream servers from
 
-external_addr = "0.0.0.0"
+## Upstream DNS server and port
+
+upstream_addr = "9.9.9.9:53"
 
 
 ## File name to save the state to
@@ -30,11 +31,6 @@ external_addr = "0.0.0.0"
 state_file = "encrypted-dns.state"
 
 
-## Upstream DNS server and port
-
-upstream_addr = "9.9.9.9:53"
-
-
 ## UDP timeout in seconds
 
 udp_timeout = 10
@@ -55,6 +51,12 @@ udp_max_active_connections = 1000
 tcp_max_active_connections = 100
 
 
+## IP address to connect to upstream servers from.
+## You probably do not want to change this. `0.0.0.0` should be fine.
+
+external_addr = "0.0.0.0"
+
+
 ## Built-in DNS cache capacity
 
 cache_capacity = 50000