I’m running AdGuard home (at home on $10 x86 thin client) and simply opened ports on my router and pointed my domain to the ip. Worked like a charm. Then my ISP added me CGNAT, so I’ve added free VPS doing wireguard tunnel home, so everything works fine. I run AdGuard with Let’s encrypt certificates, so I use the private DNS setting in Android directly with my domain. I’m running my home net on an unlimited 4G LTE connection.