I use wireguard to VPN into my LAN and access the DNS. I have wireguard running on a pizero 2 so the DNS is all it can do. In the not to distant future I plan on using a pi 5 for Wireguard so I will be able to access the LAN away from my LAN. Maybe I will look into rethink as well?