Adguard runs directly on opnsense.

https://0x2142.com/how-to-set-up-adguard-on-opnsense/

I'm in the process of migrating my OPNSense to a virtual machine so that I can run whatever network-related services I want right along side it in a container or VM. I used to scoff at those enterprising homelabbers who apparently stuck their firewall in a VM just because they could but I get it now. It's super nice to be able to just snapshot and back up the whole VM, and run whatever you want alongside it. (Although I will limit the box to specific network management things like AdGuard Home.)

Ditto, just recently set mine up this way. Will never go back to ISP or proprietary routers.

The built-in unbound dns server has support for blocklists, maybe you want to give it a try: https://docs.opnsense.org/manual/unbound.html

Unbound with tags?

* https://unbound.docs.nlnetlabs.nl/en/latest/topics/filtering...

* https://try.popho.be/securing-home3.html

* https://git.sr.ht/~moviuro/moviuro.bin/tree/master/item/lie-...

I run Adguard Home on my router with OPNSense. I don't remember how I set it up, but it wasn't that difficult.