I use Tailscale as my primary interface for handling this. Simple as adding your nextdns id number in the DNS settings and you are done.

Instruct your Tailscale invitees to download the app and voila, simply toggle it on or off as needed.