Raspberry pi + adguard + tailscale could be a good solution for you. Browser agnostic, you get an admin dashboard to manage the white/blacklists, see logs of the attempts and other goodies. Bonus, this combination works on mobile too. The only nit I have is that after restarting the phone, tailscale may not auto-start.

You could also set it up to be administered remotely so that you don't have to make that in person visit.