The best way would be to use adguard subscription that basically allows you to control the DNS. There’s a good ecosystem for phone apps as well so you can control and manage everything from an app on your phone. I think that would be the easiest to implement
If you’re a little bit more technical, you could probably set up a separate VLAN that has custom rules and roles instead of using adguard
But the best and easiest way is going to be through DNS. Because if you can control DNS then you can control the horizontal and the vertical and what actually gets loaded