How to have DNS encrypted with NextDNS?

[archie.rondell]

You could try Stubby (DNS over TLS) as this is not a huge package

[Tutorial] [No CLI] Configuring DNS over TLS with LuCI using Stubby and Dnsmasq

I recently decided to implement DNS over TLS and found that many tutorials were not oriented to those who are less tech savvy. This is a simple approach which allows you to do all configuration in LuCI without any CLI commands. I have to give credit to https://candrews.integralblue.com/2018/08/dns-over-tls-on-openwrt-18-06/, as that is where I got my setup instructions from, and just figured out how to do them in LuCI Notes: This setup expects you to use Cloudflare's DNS resolvers. If you wan…

Once installed and configured you could then use vi or nano to edit the stubby config.
NextDNS website has a script under the Router set up guide section that may work.

I tried this some time ago and it worked but I now use Unbound and Adblock for my encrypted DNS and ad filtering.

Here is the script I used. My NextDNS ID is removed.

config resolver
       option address '2a07:a8c0::0'
       option tls_auth_name '<nextdns id>.dns1.nextdns.io'
          
config resolver
       option address '2a07:a8c1::0'
       option tls_auth_name '<nextdns id>.dns2.nextdns.io'
       
config resolver
       option address '45.90.28.0'
       option tls_auth_name '<nextdns id>.dns1.nextdns.io'

config resolver
       option address '45.90.30.0'
       option tls_auth_name '<nextdns id>.dns2.nextdns.io'