I'm really excited about this one... There's this amazing docker-compose that combines Unbound, WireGuard, and Pi-Hole. I had just finished installing it on a New Jersey based VPS.

Since Pi-Hole is accessible only to me through a WireGuard (always on) VPN, I can filter all of Facebook and any packets that are destined for Apple. It's like a dream come true!

Try it yourself at https://github.com/IAmStoxe/wirehole.