If NetGuard makes you smile, have a look at ReThink.

Fast/private DNS, firewall, logs, VPN (WireGuard) ready to go.

You're welcome