I have a similar setup, with a public domain hosted by cloudflare. Internally, I use caddy with the DNS feature pointing to the cloudflare using their API and letsencrypt certs.
Something like this: https://webenclave.com/2024/11/07/setting-up-a-secure-local-network-with-caddy-cloudflare-dns-and-lets-encrypt/
I can also share more details, maybe my compose files and caddy setup if you need them.





I used pihole for years, but the recent updates made me look for alternatives. There was a major (v6?) update fuckup, but also some random freezes and block lists going missing…
Looking for alternatives, I tried out Technitium. Extremely easy to set up, rock solid, running steady for about 6 months (with frequent updates), and they recently introduced built in high-availability.