

Does it do auto certificate renewal?
Yes.
Have you considered using a Cloudflare tunnel to bypass the CGNAT?
I did before when I had some free domain over there, but I don’t think there are any worthy free domains out there anymore, and even when they are cheap, I really don’t need it and don’t feel comfortable to pay for something that I can’t use in its fullest (due to CGNAT).
For example, I am aware cloudflare tunnels can’t be used for a Plex/Video streaming and that is the number 1 service that I want to be exposed to the Internet.
For now I am living with my IPv6 address and the Synology DDNS with the reverse proxy features… My personal fallback are Tailscale and Zerotier.
Thanks, I haven’t used pi-hole in a while, but it looks the same for me.