Looking for a good guide on getting this setup via docker and AD LDAP, any pointers?

Who’s your DNS provider? I use cloudflare and powershell script and hits their API. Works well

Same but powershell. Works like a charm runs every 5 minutes

I would go with wireguard VPN or something like cloudflare tunnels or tailscale. With wireguard you’ll need to open up an external port and forward to your VPN host, but wireguard uses UDP so no one can probe it for responses. CF tunnels and tailscale you don’t have to open up holes in your firewall which is nice.

You also have the option of using a proxy and opening up 443 publicly on your firewall, but unless you know what you’re doing I’d leave that closed until you learn more.

+1 for dst nat on googles dns servers back to my piholes