Apparently nobody has ever bothered to improve nextdns in a container, so I took the initiative to do so by making it scratch-based, with nobody as the main user. Docker-compose and Dockerfile are both included in the provided url @ title.

“What is nextdns?”

https://nextdns.io/

“Does it work?”

Yep – currently using it as I type this. I also confirm that the user “nobody” is running nextdns.

“What makes the nobody user so special?”

The “nobody” user is a pseudo-user in many Unixes and Linux distributions that represents the user with the least permissions on the system. In many Unix variants, “nobody” is the conventional name of a user identifier which owns no files, is in no privileged groups, and has no abilities except those which every other user has. It is normally not enabled as a user account, i.e. has no home directory or login credentials assigned. Some systems also define an equivalent group “nogroup”.

You are welcome.