@Meliods , welcome to the community!
- Block all devices from using udp/53
- [Static] Route all DNS servers you're using thru the tunnel
- Recall, that some devices used encrypted DNS, these are hard to stop
- (Obviously, setup the Wireguard on your OpenWrt.)