DNS to block appldnld.apple.com and mesu.apple.com access to stop iOS update nags

[Dibrom2]

Hello, I'm looking for a blanket solution to prevent my phone from being able to check Apple servers for iOS updates and constantly pushing notification nag reminders in my face multiple times/day. I understand the two domains in the subject title are the ones that trigger the iOS update nags. I have already turned off every notification, stopped every auto-update and killed every app update check, but Apple doesn't respect any of these settings and just constantly pushes update nags anyway because… they're Apple.

I do not have a DNS filter setting in my router I can configure to block these domains, so that's not an option, and anyway that would only work on wifi, not phone data. Is there an encrypted DNS profile I can install that will block ads like the Adguard one does, but also will block data from these two Apple domains too?