I'd tempted to setup a DNS Forwarder up on that with Ad-Blocking then use Quad9 as upstream, then just have Tailscale be always on.
reply