easy way is to use Adguardhome.
and configure nextdns as your upstream server. I disabled the option to use filter list as the memory on B1300 is a bit small for that. YMMV. do note that Adguardhome also uses local Openssl, so if stubby DoT fails, this will face the same issue.