We installed WSL Containers on Windows 11, built a custom container from scratch, tested it, and checked what still needs ...
The filtering worked, the encrypted DNS worked, and then I had to stop everyone else from using it.
A tiny identity server called Pocket ID meant I was no longer giving the keys to my homelab to big tech.