AdGuard Home

AdGuard Home covers the same ground as Pi-hole — network-wide DNS filtering — with a more modern single-binary design, built-in support for encrypted DNS (DoH/DoT/DoQ) both upstream and to clients, and fine-grained per-client rules and parental controls.

It comes from a company that also sells commercial products, though the Home server itself is open source and fully local. Configuration lives in one YAML file, which makes backups trivial.

Pick it over Pi-hole if encrypted DNS out of the box or per-device policies matter to you; the two projects are otherwise close enough that either is a fine choice.