Raspberry pi + adguard + tailscale could be a good solution for you. Browser agnostic, you get an admin dashboard to manage the white/blacklists, see logs of the attempts and other goodies. Bonus, this combination works on mobile too. The only nit I have is that after restarting the phone, tailscale may not auto-start.