Hi David, I refrain from using netctl. Currently I have setup that only requires systemd-networkd. For my server I use unbound as local dns and forward requests to several instances of dnscrypt-proxy. Unbound is not much overhead and is caching, so this could be of benefit depending on your setup.
I'm away from real hardware, but can send some details about the setup when I'm back, if you're interested. Best, David -- https://sleepmap.de
