Yep, that's completely fair. In fact, I'm pretty sure that's the setup described by @QuinnyPig with a Pi-hole in their home lab and all devices meshed together

Yep, that's completely fair. In fact, I'm pretty sure that's the setup described by @QuinnyPig with a Pi-hole in their home lab and all devices meshed together via Tailscale (so WireGuard really). I have a bit of latency reaching my home lab when I'm traveling, hence my approach with Fly.io. There's also the appeal of having a single self-contained Docker image solving a specific problem. I'm quite adverse to running critical services, or anything that I can't redeploy trivially, so overall I'd rather pay a bit of money for the peace of mind that a PaaS offers.