Or a variation of this is TailScale configured to use NextDNS and a TS exit node. That's for anyone who doesn't want to maintain a PiHole. I've done both. Personal choice.