Pihole, unbound, router

Don't do this. Having a DNS other than Pi-hole available to clients will allow some (or perhaps all) of the DNS traffic to bypass Pi-hole.