diff --git a/extra/dns/README.md b/extra/dns/README.md
index ea8a826..ed8ee69 100644
--- a/extra/dns/README.md
+++ b/extra/dns/README.md
@@ -1,19 +1,18 @@
-
 local dns control for linux with leak reduction, firewall-aware protections, and repair tools.
 
-### what it does
+#### what it does
 
 - routes system dns through local `dnsmasq` -> `unbound`
 - keeps dns easier to monitor and control
 - helps reduce dns leak risk
 - adds rollback and repair workflows for safer network changes
 
-### local chain
+#### local chain
 
 - `dnsmasq` on `127.0.0.1:53`
 - `unbound` on `127.0.0.1:5335`
 
-### includes
+#### includes
 
 - localhost-only dns listeners
 - blocklist and whitelist support