AdGuardHome and WireGuard running at home. WireGuard connects on-demand when I leave home.
I choose to run it at home because there are cases where services and/or sites block datacenter IPs, and I have complete control over what and how I block, no proxying through any blocking service.