Awesome! I’m glad that it worked. It took me a while to figure out, when it happened to me. Glad that I could make your life easier :)

I’ve fixed the same issue for me.
Originally I had this in my Local DNS settings in my Pi-Hole:

- service1.domain	10.0.0.4
- service2.domain	10.0.0.4
- service3.domain	10.0.0.5

I changed that to this:

- host1.domain		10.0.0.4
- host2.domain		10.0.0.4

And then I added CNAME Records to the services like this:

- service1.domain	host1.domain
- service2.domain	host1.domain
- service3.domain	host2.domain

This fixed the whole thing for me :)

Edit: Gonna add some more info

The trick that makes this work, and probably will for you too, and allow you to keep your HTTPS queries, is that Pi Hole will just not ask upstream, if it has the DNS name in the CNAME records. Those CNAME records will have to point to a domain, that Cloudflare doesn’t know about. That way there is no other records upstream that will confuse the DNS server and your browser.
The hostname you have in your local DNS records that your CNAME points to, will be something only known locally for you.

You should change to use cname in pihole. I will write up on my computer later for you.

Try with nslookup and see if you’re resolving the domain to both your local ipv4 address, and the Cloudflare ipv6 at the same time. I am using pihole for my local DNS, and it would give me both my local address, and also the Cloudflare ipv6 address.

Edit
My pihole will ask upstream even if the domain was listed locally. It doesn’t ask Upstream for cname.

Any chance you are both accessing your services locally with a local DNS, and publicly with something like Cloudflare?

Erosion

I totally read that as Eurovision, and I could absolutely not figure out how that ties in to this.

Uh! They should use AI for it. That will be great! /s

Are we sure these are real humans?

I was very interested in this. Installed it, and set it up to use my preferred auth server (also selfhosted). It worked just great!
But! Then I wanted to install the add-on in my firefox browser. And it doesn’t work when using only and oauth server :(
Will probably not use this much without the extension

Not better, but also good.

Ah - a Tesla, I assume :)

The article mentions it several times, but there is no evidence of it.

It is not a Model X in the video