The Pi-hole® project is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software.
The project can use as an ad blocker for each device on a network. It can also block particular domains for internet access (e.g., known malware, spyware, ransomware, youth protection, Etc.). The Domain Name System (DNS) finds the internet address of a domain name. Pi-Hole can use as a Domain Name System. The users can switch between a bunch of DNS providers. It is also possible to set up to own clients to DNS providers. Some DNS providers use the data for their own business, e.g., Google. The use of DNS Providers who support DNSSEC protected against manipulated DNS data (e.g., DNS spoofing).
More details and the set-up of the docker-comose installation are in the GitHub Repository.pihole-docker