Important: this is a generic pi-hole installation, with some personal preferences. DNS points to the malware-blocking Cloudflare resolver, but I can also highly recommend Quad9.
./etc-pihole/
& ./etc-dnsmaq.d/
To combat iCloud Private Relay, which bypasses pihole, the additional optionBLOCK_ICLOUD_PR: "true"
has now been added.