I have set up Aduard Home on a Gcloud server and have it set up with a 3rd party ssl cert. I enabled DoH/DoT and I can see my phone is using DoT when I check the queries. My home network however is using plain DNS. Normally that would be fine, but the ADH is external so I would like the connection to be secure.

I am using an ER605 v2 on 2.0.1 and I have the WAN DNS set to my VPS.

I want the entire network to dot/doh so I assume I need to do this on the router. When I check the Omada controller I don't see any options for something like this. When I google my router I see threads confirming router does not support DoH/DoT currently...but then people mention that it does use "Unbound" which can do it.  Problem is that they don't go into any detai about setting it upl. When I google my router or Omada and Unbound...I don't really get any results. Also when I google ADH and Unbound, they're all using either pihole or some other internal server which doesn't fit my use-case.

To be honest, I haven't looked into the process for setting up/using Unbound.  I don't want to go to deep in a rabbit hole and find out that it would not help me anyway.  Any suggestions on what to do?