https://docs.pi-hole.net/guides/unbound/ explains why and how unbound is used.

Thank you, that's really cool. I've been using DNS over TLS, but it's really complicated to set up. Just running your own recursive DNS actually seems easier. :D

Thanks for that

Another good reason for having unbound is enabling internal DNS resolution for things that are in the VPN. For example, resolving build-server.mycompany to the in-VPN IP of your build server, and so on.

You can do that with just pihole FYI

You can set up DNS records