I just released a new version of dnscrypt-proxy, that you can use to connect to Cloudflare using DNS-over-HTTP/2.
Version 2.0.12 fixes a compatibility issue with Alpine Linux (for the gory details: The Go compiler on Alpine Linux enables PIE by default, which clobbered the CX register in the ChaCha20 cipher implementation).
The IPv6 filter now returns synthetic SOA records to improve compatibility with downstream (stub) resolvers.
Finally, a small but significant change: the proxy now waits for network connectivity before starting. This is especially useful if the proxy is automatically started at boot, possibly before the network interfaces are fully configured.