Put a Pihole container on your homelab which you have the Tailscale exit node on and then set it as the forced Tailnet DNS.