Seconding this. I switched from PiHole to AdGuard Home because they have built in DNS over HTTPS support. I run a second instance on my colo server (with only HTTPS exposed) for my mobile devices. AdGuard can even generate the .mobileconfig file for you to automatically set it up!