Seconded. Yeah, I've been using PiHole in a Docker container and accessing it over persistent Wireguard tunel for some time. It's been great. That and access to all of my services without them being exposed to the outside world.

AdGuard Home really is great. One really doesn’t need to set up docker if they don’t want, since it’s a single self-contained binary.