> Weasel and velope on #tor-project suggested that I remove DNSCrypt

> entirely and let Unbound be a recursive resolver against the root DNS

> servers, which I have now done. 

Jesse would you mind sharing how you configured this?