Don’t forget pihole combined with Tailscale magic DNS to get blocking on the go!

I also recommend installing unbound during the pihole installation to make your server also handle the DNS resolution. Easy, better privacy, I never noticed a performance drop.