Architecture:
NetworkManager (manage /etc/resolv.conf)
→ 127.0.0.1:53 dnsmasq (dns cache)
→ 127.0.0.1:53000 dnscrypt-proxy (user space DNS over HTTPS)
Detail config:
dnsmasq (system space) listen the :53 will read /etc/dnsmasq.conf
add server=127.0.0.1#53000 to set dnscrypt as upstream dns server