Capability rules
| Rule | Keywords | Description |
|---|---|---|
| Browser Native DoH Configuration | browser, chrome, edge, firefox, doh, dns-over-https, secure-dns, encrypted-dns, corporate, proxy | Configure DNS-over-HTTPS directly in browsers for encrypted DNS without system-wide changes or admin privileges |
| Select a NextDNS Transport and Setup Method | transport selection, encrypted dns, legacy dns, doh, dot, doq, doh3, linked ip | Choose a compatible transport and profile-association method before configuring a device or network |
| DNSMasq Integration | dnsmasq, dns, router, client reporting, conditional configuration, port configuration, setup-router | Configure DNSMasq and NextDNS to run together while maintaining client reporting and conditional configuration features |
| Mobile Native Encrypted DNS Configuration | mobile, android, ios, iphone, ipad, private-dns, dot, dns-over-tls, configuration-profile, mobileconfig, native, lightweight | Configure native encrypted DNS on Android and iOS devices without battery-draining background apps |
| OpenWrt Integration | openwrt, router, installation, upgrade, troubleshooting, ssh, luci | Installation, upgrade, and troubleshooting guidance for NextDNS on OpenWrt routers |
| Home Assistant Integration | home assistant, hass, integration, automation, parental control, api, sensors, switches, blocklist | Enable automated DNS control and monitoring through Home Assistant smart home platform with time-based rules and analytics |
| Tailscale Integration | tailscale, vpn, mesh network, doh, dns-over-https, acl, nodeattrs, global nameserver, split dns | Configure NextDNS with Tailscale mesh VPN using DoH, global nameservers, and per-device profile assignment via ACLs |
| Ubiquiti (UniFi) Integration | ubiquiti, unifi, udm, uxg, dream machine, gateway, content filtering, ad blocking, ssh, cli, dns shield | Deploy NextDNS on Ubiquiti UniFi devices using DNS Shield or CLI, with critical guidance on avoiding built-in DNS conflicts |
| pfSense and OPNsense Integration | pfsense, opnsense, firewall, router, unbound, dns-over-tls, dot, freebsd, dns resolver | Deploy NextDNS on pfSense and OPNsense firewalls with proper encrypted DNS configuration and platform-specific guidance |
| Public DNS and AdGuard Home Integration | public dns, adguard, anycast, doh, dot, browser setup, windows, android, ios, upstream dns, bootstrap dns | Configure NextDNS public DNS servers on browsers and operating systems, and integrate with AdGuard Home as upstream DNS provider |
| Synology Integration (DSM and SRM) | synology, dsm, srm, nas, router, ssh, cli, dhcp, network | Install NextDNS on Synology NAS (DSM) and routers (SRM) with proper SSH access and network configuration |
| AsusWRT-Merlin | asus, merlin, router, ssh, installation, setup | Deploy NextDNS on Asus routers with Merlin firmware |
| EdgeRouter and Firewalla | edgerouter, edgeos, firewalla, gateway, ssh, professional | Deploy NextDNS on EdgeRouter and Firewalla hardware |
| MikroTik DoH Setup | mikrotik, routeros, doh, dns-over-https, networking | Configure NextDNS via DNS-over-HTTPS on MikroTik RouterOS devices |
| Kubernetes Integration | kubernetes, k8s, coredns, daemonset, dns policy, container | Deploy NextDNS CLI as a node-level DNS proxy in Kubernetes clusters |
| Raspberry Pi Integration | raspberry pi, pi-hole alternative, home network, dhcp, network-wide, dedicated dns | Deploy NextDNS CLI on Raspberry Pi as a dedicated LAN DNS server |
| GL.iNet Router Integration | gl.inet, gl-mt3000, gl-axt1800, gl-mt6000, travel router, adguard conflict | Install NextDNS CLI on GL.iNet routers after disabling built-in AdGuard Home |
| Docker Compose Deployment | docker compose, container, host network, compose file, production, dns container | Deploy NextDNS CLI as a Docker Compose service with host networking |
| MDM Deployment (Jamf, Intune, Apple Configurator) | mdm, jamf, intune, apple configurator, mobileconfig, enterprise, fleet, supervised | Push NextDNS DNS profiles to entire device fleets via MDM |
Efficiency rules
| Rule | Keywords | Description |
|---|---|---|
| Backup and Failover | backup dns, failover, redundancy, reliability | Ensure connectivity during DNS outages |
| Pi-hole to NextDNS Migration | pi-hole, migration, blocklist import, local dns, transition | Migrate Pi-hole custom rules and local DNS to NextDNS |
Adding new integration rules
When adding a new integration rule:
- Create a new file in
rules/using kebab-case naming - Follow the rule template structure from
templates/rule-template.md - Include platform-specific configuration examples
- Add troubleshooting steps for common issues
- Register the rule in the appropriate table above
- Run
pnpm lint:fixto ensure compliance
Example integration platforms
Consider creating rules for these popular platforms:
Capability Rules:
- Tailscale (mesh VPN)
- Home Assistant (smart home automation)
- Ubiquiti UniFi (network controller)
- OpenWrt (router firmware)
- pfSense (firewall/router)
- Docker (containerization)
- Kubernetes (orchestration)
- Synology NAS (network storage)
Efficiency Rules:
- Multi-platform deployment strategy
- Integration testing and validation
- Backup DNS and failover configuration