DNScrypt-proxy on openWRT + Unified blocklist text file is far superior than any of the alternatives in the comments.
It’s not an ”out of the box” solution. But when it’s set up you get encrypted DNS requests and network wide ad blocking.
All in a few megabytes.