I moved away from pihole because every time I had a fiddle, I bought down the DNS of my whole house, resulting in lots of stressed children :) the solution I switched to is against the ethos of this sub, but it’s good and worth the cost.

I would risk it. After all, it’s the only thing protecting my entire gitlab account. If someone could break my ssh, they could do what they want to my gitlab presence,and I’m guessing someone at gitlab is paid and qualified to make that call.