Trying to figure out Pi-hole/Adguardhome, Unbound and PIA VPN

[WolfpactVI]

Good afternoon everyone,

Currently my home router/firewall is Opnsense 24.7.10_2 on an old Dell server I had lying around.  I'd like to get some things set up on it.  Hoping someone can point me in the right direction, hopefully to recent tutorial(s) or video(s) to walk me through.  I've been scouring the interwebs, but anything I find is either outdated or incomplete.  I'm not even entirely sure it's possible to do what I want.

I'd like the basic setup to be:  Computers, phones, etc ---> Opnsense box ---> Pi-hole/Adguardhome ---> PIA VPN

Basically I want all devices (except perhaps specific machines or VLANs) to be run through my PIA VPN without needing to set up each one, AND have ad blocking and adult website blocking at the router level.  Further, I'd like Pi-hole or Adguardhome to NOT route traffic to specific websites through PIA (like Disney+ or other sites that break when using PIA, for instance), but instead to Unbound or Cloudflare or something.  This second part is what I don't know if it's even possible on a per-website basis.

For now, I really want to at least get the first part set up.  I successfully got Adghardhome set up on the Opnsense box itself using a tutorial.  I tried installing Pi-hole in Docker on my home server, but could not seem to get Opnsense connected to it (as an aside, if someone has a tutorial on how to do that, it would be much appreciated - I would still like to get this working, even if I decide to stick with Adguardhome in the end).  I'm not helpless, just completely strapped for time right now, but at the same time I've put this off far too long.

Thanks in advance everyone!