WireHole is a combination of WireGuard, Pi-hole, and Unbound in a docker-compose project with the intent of enabling users to quickly and easily create a personally managed full or split-tunnel WireGuard VPN with ad blocking capabilities thanks to Pi-hole, and DNS caching, additional privacy options, and upstream providers via Unbound.

Interesting... Via Awesome Wireguard.

https://github.com/NLnetLabs/unbound/releases/tag/release-1.9.5

• DNS RPZ – Using DNS as a layer of defence
• Response Policy Zones in Unbound (RPZ was introduced in unbound v1.10)
• DNS-over-HTTPS in Unbound, Ralph Dolmans, APNIC