Depending on what method you use, you would either have to change the configuration for port mapping in a file or when you run the container. It’s simple enough, and you should be able to figure it out quite easily. If not, help for Docker related stuff is never far away.
uBlock Origin gets rid of every single one.
Pihole is easy and light enough. I used to host Transmission (transmission-daemon) on a 3B+ and it worked alright for seeding around 300-500 torrents. FreshRSS also worked alongside.
Is having your passwords and TOTP in one place recommended? I would’ve thought that having both separate would be more secure.
I’ve been using Cloudflare for a while now, Namecheap before that. Both have been good to me, but I prefer Cloudflare more for their various other services, so it made sense to move the domains there as well.
I did recommend Pihole in my original reply. But there’s no way to block Youtube ads using it, as was being asked in the reply to my original reply.