Basic suggestions or point outs to online guides would be great. Not looking to create the uber secure network or anything else like that, just plugging the obvious holes and basic optimizations.
Generally speaking, unless a device has to be mobile I prefer to go through the one-time effort of running an ethernet drop to get solid connectivity vs forever fighting ever-noisier wifi.
There should be an option to setup a DMZ (bypass firewall).
Make this your DMZ host and connect everything else to this device.
You may or may not be able to setup a DNS via the DHCP server settings on one of the routers (check the manual). If you can’t then you’ll have to manually define the DNS on each client.
Just realized it’s a modem. In which case you can ignore the DMZ thing I mentioned. I incorrectly assumed it was a router from the service provider. The DNS stuff still applies for the PiHole (set via DHCP server options or manually per device).