pi-hole-unbound-wireguard VS pistrong

In addition follow this until you get to the WireGuard install and install PiVPN instead: https://github.com/notasausage/pi-hole-unbound-wireguard.

I installed PiHole with Unbound, following this guide: https://github.com/notasausage/pi-hole-unbound-wireguard and after those, I also installed wireguard. Everything was working so far, but when I entered via ssh to the raspberry pi, to enable NFS shares there, it started having problems resolving the domains:

You navigate to the dns page of pi hole and input the static IP of your Pihole. Again doesn’t matter if you are wired or wireless. I love this guide: https://github.com/notasausage/pi-hole-unbound-wireguard. I use everything up to the WireGuard instructions and just use piVPN because I think it’s a better solution and I still use WireGuard!

I used guide: https://github.com/notasausage/pi-hole-unbound-wireguard

Using WireGuard or some other solution? Man - with a few pi’s, it was super simple. I used this guide as a guide: https://github.com/notasausage/pi-hole-unbound-wireguard For the server side set up. But when it came to the WireGuard piece I installed piVPN for WireGuard. Worked first time.

I also prefer in combo with WireGuard. There are some good tutorials out there. See this start to finish guide for setting up locally Pihole +Unbound +WireGuard or, even easier, this docker-compose tutorial called WireHole. If you want to go the cloud-based route there are a bunch of options. See this Cloudblock tutorial. It looks like it is still being maintained.

notasausage/pi-hole-unbound-wireguard: Turning your Raspberry Pi into an ad-blocking VPN with built-in DNS resolution using Pi-Hole, Unbound & WireGuard. (github.com)

SwanStrong VPN - https://github.com/gitbls/pistrong lighter but still strong

Yes, adding certs with strongswan/ikev2 is a bit of a pain, but it IS fully documented at https://github.com/gitbls/pistrong/blob/master/CertInstall.md. The cert installs are a one-time thing, of course.

Heretic here. Every Client OS (Android, iOS, MacOS, Windows, Linux, etc) has IPSEC built into the OS. No need to install an app on the client. If you want to avoid installing VPN software on every client that uses the VPN, take a look at https://github.com/gitbls/pistrong

If you mean Split Tunneling, then strongSwan definitely supports it on Windows 10. I think MacOS does, you can probably make it split with Linux. For Windows, see Install strongSwan Certs on Windows 10, for example. Also found this https://www.frakkingsweet.com/strongswan-ikev2-split-dns-and-ios/