Agreed. I used pihole initially when I was first learning networking, but when I got a dedicated machine and installed OPNsense, I learned how much easier so many things can be.

Don’t make any of them accessible from the Internet then. VM escape is also possible for someone with skills

i am satisfied with noip

Unbound on OPNsense ftw

I was in your position a few years ago. Went the Proxmox route. For many services, don’t make separate VMs, but instead separate LXC containers. Saves time and space.