# Install nextdns with Homebrew, chocolatey, MacPorts, Nix, scoop, winget CLI for NextDNS's DNS-over-HTTPS (DoH). Version 1.47.3 via Homebrew; verified 2026-06-03. ## Install ```sh sudo av install brew:nextdns ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install nextdns ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install nextdns ``` Evidence: MacPorts ports tree: net/nextdns/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - Nix (92%): ```sh nix profile install nixpkgs#nextdns ``` Evidence: nixpkgs package indexes: pkgs/by-name/ne/nextdns/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ### Windows - Chocolatey (92%): ```sh choco install nextdns ``` Evidence: Chocolatey community package catalog: nextdns from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','naps2' - Scoop (92%): ```sh scoop install main/nextdns ``` Evidence: Scoop official bucket manifest trees: bucket/nextdns.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id NextDNS.NextDNS -e ``` Evidence: Windows Package Manager source index: NextDNS.NextDNS from https://cdn.winget.microsoft.com/cache/source.msix ## Package facts - **Package key:** brew:nextdns - **Package manager:** Homebrew - **Package manager page:** - **Version:** 1.47.3 - **Source summary:** CLI for NextDNS's DNS-over-HTTPS (DoH) - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** MIT - **Source archive:** - **Last updated:** 2026-06-03T19:41:47Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - nextdns (cli) - nextdns (alias) ## Build dependencies - go ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 1.47.3 - Package-manager updated: 2026-06-03 - Local data: ok - Upstream repository: https://github.com/nextdns/nextdns - Upstream latest detected: v1.47.3 (current) ## Project history and usage NextDNS CLI is the open source DNS53-to-DNS-over-HTTPS proxy for the NextDNS service. It is aimed at routers and Unix-like systems, while also serving Windows and macOS users who prefer a CLI and an open source client over the GUI app. ### Project history NextDNS was founded in May 2019 by Romain Cointepas and Olivier Poitrey, and the CLI followed the service's core idea: make encrypted, policy-aware DNS usable not only per browser or per app, but at the device or router boundary. The GitHub repository is written mostly in Go and packages the resolver/proxy, router integrations, install scripts, and platform glue. ### Adoption history The CLI became a practical choice for people running NextDNS on OpenWrt, Ubiquiti/UniFi, Asuswrt-Merlin, Firewalla, Linux servers, macOS, and Windows. Its adoption is tied to home-network and small-network DNS filtering: users want DoH, local caching, split horizon/conditional forwarding, client identification in logs, and one setup that covers devices that cannot install an app. The GitHub page showed about 4.1k stars, 242 forks, and 167 releases when researched on July 1, 2026. Homebrew analytics reported 185 installs in 30 days, 476 in 90 days, and 1,452 in 365 days for the formula when queried on the same date. ### How it is used Package nerds install NextDNS CLI when they want the router or host to listen on traditional DNS port 53 and forward queries through encrypted NextDNS endpoints. The installer/config flow asks for a NextDNS profile ID, can configure router mode, can report client information, and can enable local caching. The interesting usage is not just 'run a DoH client'. NextDNS CLI can mix NextDNS with another DNS provider for split-horizon behavior, integrate with router environments, expose service control commands, and centralize DNS policy for machines that otherwise leak around browser-only DoH settings. ### Why package nerds care NextDNS CLI is a packaging bridge between privacy DNS SaaS and real network appliances. In av.db, the key enrichment point is that the executable is likely to manage local resolver/service state and profile identifiers in /etc/nextdns.conf rather than storing classic username/password credentials. ### Timeline - 2019-05: NextDNS founded in Delaware by Romain Cointepas and Olivier Poitrey. - 2019: The nextdns/nextdns tag series began with v1.0.0 in the public repository. - 2026-02-22: GitHub wiki home page revision date observed for CLI documentation. - 2026-06-03: GitHub page listed nextdns-v1.47.3 as the latest release. - 2026-07-01: Homebrew formula version observed as 1.47.3, with 1,452 formula installs over the preceding 365-day analytics window. ### Related projects - NextDNS service - OpenWrt - UniFi/UDM - Asuswrt-Merlin - Firewalla - DNS-over-HTTPS ### Sources - - - - - - ## Security Notes broad file, network, media, or database tool signal. - **Geiger risk:** blue / medium - broad file, network, media, or database tool signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: /etc/nextdns.conf ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** nextdns - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - nextdns: normalized package name match | nixpkgs package indexes: pkgs/by-name/ne/nextdns/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - MacPorts - nextdns: normalized package name match | MacPorts ports tree: net/nextdns/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Chocolatey - nextdns: normalized package name match | Chocolatey community package catalog: nextdns from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','naps2' - Scoop - main/nextdns: normalized package name match | Scoop official bucket manifest trees: bucket/nextdns.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget - NextDNS.NextDNS: normalized package name match | Windows Package Manager source index: NextDNS.NextDNS from https://cdn.winget.microsoft.com/cache/source.msix ## Related links - [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider. - [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew. - [c-ares](https://www.automicvault.com/pkg/brew/c-ares/) - Shares av.db curated category or tags: cli, dns, networking, resolver. - [knot-resolver](https://www.automicvault.com/pkg/brew/knot-resolver/) - Shares av.db curated category or tags: cli, dns, networking, resolver. - [q](https://www.automicvault.com/pkg/brew/q/) - Shares av.db curated category or tags: cli, dns, doh, networking. - [unbound](https://www.automicvault.com/pkg/brew/unbound/) - Shares av.db curated category or tags: cli, dns, networking, resolver. - [adns](https://www.automicvault.com/pkg/brew/adns/) - Shares av.db curated category or tags: cli, dns, networking, resolver. - [bind](https://www.automicvault.com/pkg/brew/bind/) - Shares av.db curated category or tags: cli, dns, networking. - [chinadns-c](https://www.automicvault.com/pkg/brew/chinadns-c/) - Shares av.db curated category or tags: cli, dns, networking. - [ddclient](https://www.automicvault.com/pkg/brew/ddclient/) - Shares av.db curated category or tags: cli, dns, networking. - [doh](https://www.automicvault.com/pkg/brew/doh/) - Local package facts share a topical domain. Shared terms: cli, dns, dns-over-https, doh, https. - [doge](https://www.automicvault.com/pkg/brew/doge/) - Local package facts share a topical domain. Shared terms: cli, dns, dns-over-https, https, networking. ## Combined YAML source View the package source record on GitHub. [combined/nextdns.yml](https://github.com/automic-vault/db/blob/main/combined/nextdns.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph