Switching SSH to a non-standard port can cut down on log noise but it doesn’t really help with security. It’s trivial to identify ssh running on any port and attackers typically do full port scans anyway.

I’d put that effort towards allowlisting only trusted public ips or setting up wire guard/tailscale for ssh access instead.

I migrated from pihole to technitium a few weeks ago and it was so smooth.

Native support for clustering is huge. I didn’t even realize how complex managing the pihole had gotten trying to get it to sync to multiple instances.