Help with Advanced Setup: NextDNS CLI + NordVPN Integration on Windows (Specific Questions)

Hello NextDNS team and community,

I am working on an advanced privacy setup and would highly appreciate your input on some critical questions.
My goal is to integrate NextDNS CLI with a NordVPN connection on Windows 10/11, while maintaining full security (no DNS leaks, no privacy loss).

Here are the specific questions:

1. Is NextDNS CLI officially compatible with using a VPN like NordVPN simultaneously on Windows?
If yes, what configuration settings (CLI flags or system tweaks) are recommended to ensure 100% proper operation?

2. Should the "setup-system-dns" flag be set to false when using NextDNS CLI with a VPN client?
Or should we manually point Windows DNS to 127.0.0.1 to route queries through NextDNS CLI?

3. Can you confirm if Windows manually setting DNS to 127.0.0.1 is a reliable method for NextDNS CLI + VPN integration?

4. Are there advanced diagnostic commands or logs we should monitor to confirm that DNS requests are actually routed through NextDNS CLI correctly, even while the VPN is active?
(e.g., special logs, flags, tools, etc.)

5. Are there any known conflicts with NordVPN (specifically using NordLynx protocol) that we should account for when using NextDNS CLI?
Would it be better to use another VPN protocol or make adapter-specific changes?

Current status:

• Windows 10 / Ethernet connection

• NordVPN using NordLynx protocol

• NextDNS CLI installed and working (without VPN active)

• Testing custom DNS settings

• Goal: Achieve complete NextDNS CLI operation with all traffic routed securely through the VPN, without fallback to ISP DNS or DNS leaks.