@kzimmermann
PiHole with Wireguard and some dns encrypting software (dnscrypt-proxy, unbound or cloudflared). If you host clearnet website its never been easier to redirect tor user to .onion version of it, just setup tor service and adequate webserver header.