Pi-hole and sys-vpn for myappVM

hello,
I want my chocolatVM to go through sys-vpn and pi-hole at the same time, that is to say I want ChocolatVM to have the vpn, and also be filtered by pihole at the same time to remove the ads.

I have the following machines:

sys-net
sys-firewall
sys-vpn
PiholeVM
ChocolateVM
bananaVM

in what order should be configured
the goal I’m looking for is to have my ChocolatVM filter by pi-hole, and also go through the vpn do you have a solution?
of course I try several combinations, but it does not work either only the vpn works or only the pi-hole works and thank you very much to you.