You can also add devices to groups by MAC address or hostname, but a static IP might be best.

I only need a couple of domains to work. My way could be a hassle if you need to figure out whitelists for a few services.