On the router.

My router is locked down so i assign the vrrp address to wach client (pain in the ass) but it works.

Pivpn takes care or wireguard too.

2 pihole instances 1 pi5 1 pi4 Keepalived provides vrrp at a set address.

Instances kept in sync via orbital

1 goes down the other takes over.

Quite elegantly.

Lighttpd ran into a dns issue mid update. And it dif not complet and left the aformentioned webserver running.

Removed with apt and voilla.