I have a virtual FreeBSD box running dnscrypt-proxy. It's configured with CloudFlare for DNS over HTTPS.