Best qube chaining?

Hi,

I have a question regarding chaining my qubes to have best anonyimity/privacy. I have the following qubes:
sys-net: Default qubes for network
sys-dnscrypt: running dnscrypt
sys-vpn: running a vpn with wireguard
sys-whonix: default whonix gateway

Which chaining would be best to have best privacy/anonymity for:

  • an appQube which does not use tor
  • an app qube which uses tor

I would like to have dnscrypt proxy for both situations

Thanks in advance!