[tbyehl]

Would recommend using the NextDNS software as the on-prem caching resolver — it can pass through the requesting client information so you're not losing any of the logging you'd have running Pi-hole, etc. at home.