Gallery: Aves - https://github.com/deckerst/aves
Calendar: Etar - https://github.com/Etar-Group/Etar-Calendar

Librey looks an nice alternative
https://github.com/Ahwxorg/librey/

Almost, but only for DNS https://heimdalsecurity.com/blog/what-is-encrypted-dns-traffic/

You can also use DNS-over-SSH or DNS-over-TOR, only tunnels the DNS not the whole traffic

With plain DNS the ISP can see that you request example.tld to 1.1.1.1

With encrypted DNS (DoT, DoH, DoQ, DNSCrypt…) the requests are encrypted with TLS or other, o only see that you connected to dns.cloudflare.com not the domain that you request, so it cannot see that you requested example.tld