Set up a private, in-tunnel DNS-over-TLS proxy for your OpenVPN clients
maroonmed.com