A dnscrypt-proxy setup with https://github.com/notracking/hosts-blocklists/tree/master/d... goes a long way!

For anything that is not blockable on DNS level one should use uBlock Origin from Gorhill.