Add OpenNIC alternative root servers to /etc/default/dnscrypt-proxy.