My private internet: Pi-hole, Unbound & Tailscale

How I built a self-contained DNS stack that blocks ads, skips third-party resolvers, and follows me everywhere — for about an hour of setup and zero ongoing cost.