Set up a VPN server that pomotes a pihole DNS server that is only acessible throught the vpn network.
You have to replace 'insert-random-string' with a real password. Also read throught the docker-compose.yml and see if you need to make any changes to the ip adresses and ports.