You could use a reverse proxy to terminate tls, and take the tls off of ad guard itself.

Of all those, I’ve only heard of Heztner. Am I out of touch?

I’ve been a Linode customer for years, and I used to use Digital Ocean as well. I’ve been happy with them, did you consider them?

Ludusavi does it all for you, works great, and the dev implemented my feature request within a few weeks (handling a mounted Windows drive better)

https://github.com/mtkennerly/ludusavi

None that article, but check my other reply and check your plan. You may be pleased, I was.

The marketing fluff doesn’t, but they actually did increase upload speeds. Mine went from 10 to 20 up. And here is the DSL reports forum thread from when this round started.

Also, they are testing larger increases. I could get 100 up today, if I had a supported modem.

So, check your actual plan and modem to see what you have now.

Yes. 2019 comment from cloudflare: https://news.ycombinator.com/item?id=19828702

On my network, I send dns requests for only the archive domains to a DNS server that archive likes. Adguards, in this case. Everything else goes to cloudflare. Both adguardhome and unbound can do that.