You can use any of those for DNS, Unbound, Pihole, Adguard, etc..
Since you have unbound already with opnsense you can just use that, it supports blocklists and has a dashboard to monitor things.
You can use any of those for DNS, Unbound, Pihole, Adguard, etc..
Since you have unbound already with opnsense you can just use that, it supports blocklists and has a dashboard to monitor things.
How do I set that up for access outside my network?
I don't want to tunnel traffic with wireguard since my upload is too low.
Tunnel just DNS over wireguard in that case, instead of using it as a default gateway and tunneling all traffic.
I recommend setting up selective routing in your opnsense wireguard and use that for the PrivateDNS. That way you won't tunnel traffic through your home unnecessarily.