The goal is to use ensure all network traffic from the Raspberry Pi (including DNS lookups) is encrypted. To accomplish this we will use dnscrypt-proxy and OpenVPN. To cache DNS lookups we will use unbound. We also want to guarantee that specific services only connect via the VPN. I consolidated all the steps into an instructional Google Doc.
Encrypting Network Traffic Using Debian/Raspbian on the Raspberry Pi