Can I Avoid Losing Pi-Hole in my home stack? (without major concessions)
Hi folks!
I'm not mentally seeing a perfect option for me here, so hoping I can get some inventive technical ideas I haven't thought of.
I've been using Pi-Hole for several years now. Setup just how I want it, I've been loving it, and don't really want to lose it.
Recent developments and necessary changes have put me in a situation where I'm having a hard time thinking how I can retain Pi-Hole with it fitting neatly into my new setup.
My current setup:
Just me unless guests are visiting. Old laptop at home running 24/7, Ubuntu Server on it, with Pi-Hole installed. Same laptop also runs OpenVPN CE, with my phone connected to it 24/7 with kill-switch for remote access/ad-blocking on the go, and securing my connection while out and about. Works great.
What's changing:
I live in the UK, I really don't like the direction of travel and the attack on internet neutrality, and I'm fed up with it, so I'm needing to insert an additional (or replacement) VPN into the mix. I am simultaneously in the process of de-Googling, and this context is important.
I plan to move Google Drive + Gmail to Proton equivalents, and this will already entail using a plan that includes ProtonVPN, so it seems a no-brainer.
My conundrum and thoughts:
I could install site-to-site Proton VPN on my router (Draytek - maybe UniFi router next to match my AP's when update support expires next year) on the WAN side for Proton, which would allow me to keep Pi-Hole both at home and on the go, but I'm very hesitant as it will add even more points of failure, likely introduce issues with banking apps and various other sites, and I'm not sure if I'll have an easy means to bypass VPN for specific sites, switch servers, or easily turn off temporarily at will.
I could go Proton on individual devices, but this then kills pi-hole from the equation. Proton's paid offerings do offer an ad-blocker for day-to-day (presumably DNS-based too), and I could switch VPN ad-hoc if needing remote access (or utilise a different means for remote access)
I'm also aware that doing 24x7 per-device Proton would cause a head-ache for future prospects of i.e. Home Assistant, at home phone backups etc. unless going split tunnel for LAN, which (annoyingly) I believe from reading up, disables the potential of enabling the kill-switch option.
Questions:
Am I missing some obvious way to keep my Pi-Hole integrated into the stack that isn't going to cause huge headaches, doesn't have humongous complexity (beyond what it is already) or entail constantly hopping back and forth between VPNs?
Does anyone know how Proton's ad-blocking offerings compare to Pi-Hole's? I can't imagine it'd be as thorough or customisable, as a heavily "consumer-oriented" offering.