Just know that DoH is probably going to ruin the fun for you. Unless your blocking all DoH hosts.

In my Opnsense setup I have some lists added to block all traffic to known DoH servers...