Can’t say enough good things about ProxMox.
Pair it with Proxmox Backup Server and you’re golden.
If you/an upgrade breaks something, just restore that LXC/VM from backup.
Can’t pay enough for that kind of peace of mind.
And PBS will take care of deduplication, retention and verification.
For me 2x local pihole + unbound works great.
I also have pihole + unbound running on a VPS exposed to my tailnet, serving as a backup when my home changes IP or goes offline.
I have ddns on Cloudflare.
It works great, until your home IP changes.
After that wireguard will happily hammer the old IP, till something breaks the tunnel and it reestablishes it to the new IP.
Working as intended.
My workaround was forcing the IP change over night while everyone was home.
For me its been wireguard with split tunnel but that had a glaring issue with my home IP change (running 2 Pi-hole+unbound instances on separate network segments and hardware).
Some time ago I switched to tailscale and added a Pi-hole on a VPS. Closed system, nothing exposed to the wide internet, works 99.99…% of the time, whole family protected against low hanging fruit attacks and adds.
I would suggest 2 pi-hole + unbound stacks on different hardware, preferably on different switches.
That way you can restart/fiddle with things without your family going crazy about “internet not working”.
I would suggest looking into TiniMiniMicro used PC and let NAS do NAS things.
Try to get a PC with decent number of thread and put as much RAM as it supports.
Install ProxMox on it and go nuts.
Learn Linux TV has a great series of videos on it.
Can’t say enough good things about ProxMox. Pair it with Proxmox Backup Server and you’re golden. If you/an upgrade breaks something, just restore that LXC/VM from backup. Can’t pay enough for that kind of peace of mind. And PBS will take care of deduplication, retention and verification.