validating, recursive, caching DNS resolver with DNS over TLS (DoT), with optional Pi-Hole install
Don't forget to add free space to cloned VM/CT:
VM > Hardware > Hard Disk > Disk Action > Resize
CT > Resources > Root Disk > Volume Action > Resize
bash -c "$(wget -qLO - https://raw.githubusercontent.com/vdarkobar/unbound/main/setup.sh)"
(steps used to configure Unbound)