5-hop (fast) vpn (2-hop your vpn, 3hop tor/anyone)
(prefer anyone.io above tor if decentralized minded)

Recipe:
- favorite 2hop VPN service
- dnsmasq
- privoxy
- tor (daemon)

Install 2hop vpn enable kill-switch.

Create/edit --> /etc/tor/torrc
----------------------------------------
SocksPort 127.0.0.1:9050
SocksPolicy accept 127.0.0.1
SocksPolicy reject *
VirtualAddrNetwork 10.192.0.0/10
VirtualAddrNetworkIPv6 [fc00::]/7
AutomapHostsOnResolve 1
DNSPort 5300
HTTPTunnelPort 0
SafeSocks 1
TestSocks 0
DisableNetwork 0
AvoidDiskWrites 1
ClientOnly 1

Create/edit -- /etc/privoxy/config
------------------------------------------------------
forward 127.*.*.*/ .
forward localhost/ .
listen-address 127.0.0.1:8118
forward-socks5t / localhost:9050 .
accept-intercepted-requests 1
confdir $PRIVOXY_CONFIG_DIR
actionsfile match-all.action
actionsfile default.action
actionsfile user.action
filterfile default.filter
filterfile user.filter
toggle 1
enable-remote-toggle 0
enable-remote-http-toggle 0
enable-edit-actions 0
enforce-blocks 0
buffer-limit 4096
enable-proxy-authentication-forwarding 0
forwarded-connect-retries 0
accept-intercepted-requests 0
allow-cgi-request-crunching 0
split-large-forms 0
keep-alive-timeout 5
tolerate-pipelining 1
socket-timeout 300
logfile $PRIVOXY_LOG_FILE
debug 512

Create/edit -- /etc/dnsmasq.conf
---------------------------------------------
listen-address=127.0.0.1
bind-interfaces
server=127.0.0.1#5300
no-resolv
strict-order

In fish shell edit ~/.config/fish/config.fish
---------------------------------------------------------
if status is-interactive
# Commands to run in interactive sessions can go here
end
function proxy_on
set -gx http_proxy 127.0.0.1
set -gx https_proxy 127.0.0.1
set -gx all_proxy socks5h://127.0.0.1:9050
set -x NO_PROXY localhost,127.0.0.1
echo "Proxy enabled"
end
function proxy_off
set -e http_proxy
set -e https_proxy
set -e all_proxy
set -e NO_PROXY
echo "Proxy disabled"
end

fish_add_path "$HOME/.local/bin"
proxy_on_blockAll