That part has worked fine so far. My trouble seems to be that my desktop is defaulting to netbird for DNS instead of the pihole, so I lose the pihole blocking. I suppose the easiest solution is just to netbird down when I’m not using it so DNS goes back to default.

And he is :)

I haven’t come across a way to split tunnel, but it’s worth looking into. I’m managing it all by CLI anyway, so maybe there’s a command for that.