Using AdGaurd as primary DNS, with unbound for local hosts. DNS over TLS/HTTPS is setup for all recursive lookups.
Network Time Protocol (NTP) settings in OPNsense
Configure OPNsense firewall/router to update A records hosted in Cloudflare DNS when the dynamic public IP changes. OPNsense Dynamic DNS (DDNS) service with Cloudflare.