So easy… literally Tailscale has a special nameserver type just for NextDns…