DNSCrypt on Linux

dnscrypt.sh

$ sudo pacman -S dnscrypt-proxy dnsmasq dnsutils
$ sudo nvim /etc/dnscrypt-proxy/dnscrypt-proxy.toml
---
server_names = ['scaleway-fr', 'google', 'cloudflare', 'cloudflare-ipv6']
listen_addresses = ['127.0.0.1:53000', '[::1]:53000']
cache = true
---


$ sudo nvim /etc/dnsmasq.conf
---
no-resolv
server=::1#53000
server=127.0.0.1#53000
listen-address=::1,127.0.0.1
conf-file=/usr/share/dnsmasq/trust-anchors.conf
dnssec
---



$ sudo nvim /etc/resolv.conf
---
nameserver ::1
nameserver 127.0.0.1
options edns0 single-request-reopen
---


$ sudo chattr +i /etc/resolv.conf
$ sudo systemctl disable systemd-resolved.service --now
$ sudo systemctl enable dnscrypt-proxy.service --now
$ sudo systemctl enable dnsmasq --now