https://github.com/M66B/NetGuard

The only caveat is that it’s setting itself up as a local VPN for the block/allow list, so you can’t use it in parallel with an actual VPN. My workaround is to have my actual VPN installed directly on the router both at home and at work, which covers 98% of my use cases.