zoneConfig:
  timeToLive: 1h
  baseDomain: example.com
  emailAddress: domain-admin@example.com
  zoneRefresh: 1h
  zoneRetry: 30m
  zoneExpire: 1w
  zoneMinimum: 1h
  nameServers:
  - ns1.example.com
  - ns2.example.com
  blockedDomains: []
sources:
  hostFileURLs:
  # Suspicious Activity
  - "https://raw.githubusercontent.com/PolishFiltersTeam/KADhosts/master/KADhosts.txt"
  - "https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Spam/hosts"
  # Advertising
  - "https://adaway.org/hosts.txt"
  - "https://raw.githubusercontent.com/anudeepND/blacklist/master/adservers.txt"
  - "https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0&mimetype=plaintext"
  - "https://raw.githubusercontent.com/FadeMind/hosts.extras/master/UncheckyAds/hosts"
  - "https://raw.githubusercontent.com/bigdargon/hostsVN/master/hosts"
  - "http://sysctl.org/cameleon/hosts"
  # Tracking
  - "https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.2o7Net/hosts"
  - "https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt"
  - "https://hostfiles.frogeye.fr/firstparty-trackers-hosts.txt"
  # Malicious
  - "https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareHosts.txt"
  - "https://v.firebog.net/hosts/Prigent-Crypto.txt"
  - "https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Risk/hosts"
  - "https://urlhaus.abuse.ch/downloads/hostfile/"
  # Misc
  - "https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts"
  domainListURLs:
  # Suspicious Activity
  - "https://v.firebog.net/hosts/static/w3kbl.txt"
  # Advertising
  - "https://v.firebog.net/hosts/AdguardDNS.txt"
  - "https://v.firebog.net/hosts/Admiral.txt"
  - "https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt"
  - "https://v.firebog.net/hosts/Easylist.txt"
  # Tracking
  - "https://v.firebog.net/hosts/Easyprivacy.txt"
  - "https://v.firebog.net/hosts/Prigent-Ads.txt"
  # Malicious
  - "https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt"
  - "https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt"
  - "https://phishing.army/download/phishing_army_blocklist_extended.txt"
  - "https://v.firebog.net/hosts/RPiList-Malware.txt"
  - "https://v.firebog.net/hosts/RPiList-Phishing.txt"
  - "https://raw.githubusercontent.com/Spam404/lists/master/main-blacklist.txt"
  - "https://raw.githubusercontent.com/AssoEchap/stalkerware-indicators/master/generated/hosts"
  - "https://v.firebog.net/hosts/Prigent-Crypto.txt"
  # Misc
  - "https://raw.githubusercontent.com/dibdot/DoH-IP-blocklists/master/doh-domains.txt"
  - "https://s3.amazonaws.com/lists.disconnect.me/simple_tracking.txt"
  - "https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-malware.txt"
  adBlockURLs:
  - "https://big.oisd.nl"
  - "https://raw.githubusercontent.com/hagezi/dns-blocklists/main/adblock/pro.txt"
  - "https://raw.githubusercontent.com/hagezi/dns-blocklists/main/adblock/tif.txt"
  - "https://github.com/KnightmareVIIVIIXC/AIO-Firebog-Blocklists/raw/main/lists/firebogadmal.txt"
allowList:
- ^localhost$
- ^localhost\.localdomain$
- ^local$
- ^broadcasthost$
- ^ip6-localhost$
- ^ip6-loopback$
- ^ip6-localnet$
- ^ip6-mcastprefix$
- ^ip6-allnodes$
- ^ip6-allrouters$
- ^ip6-allhosts$
- (^|\.)apiservices\.krxd\.net$
- (^|\.)app-measurement\.com$
- (^|\.)assets\.adobedtm\.com$
- (^|\.)bato\.to$
- (^|\.)brandify\.com$
- (^|\.)clients.\.google\.com$
- (^|\.)cpng\.lol$
- (^|\.)doubleclick\.net$
- (^|\.)duckduckgo\.com$
- (^|\.)events\.data\.microsoft\.com$
- (^|\.)ghostery\.net$
- (^|\.)googleadservices\.com$
- (^|\.)kochava\.com$
- (^|\.)launchdarkly\.com$
- (^|\.)logfiles-va\.zoom\.us$
- (^|\.)logfiles\.zoom\.us$
- (^|\.)login\.live\.com$
- (^|\.)magiskmanager\.com$
- (^|\.)mimojp\.store$
- (^|\.)msn\.com$
- (^|\.)nest\.com$
- (^|\.)nexusrules\.officeapps\.live\.com$
- (^|\.)playfabapi\.com$
- (^|\.)sailthru\.com$
- (^|\.)sendgrid\.net$
- (^|\.)tealiumiq\.com$
- (^|\.)thepiratebay\.org$
- (^|\.)unagi-na\.amazon\.com$
- (^|\.)unagi\.amazon\.com$
- (^|\.)vercel-dns\.com$
- ^\w+-\d{4}\.\w+-msedge\.net$
- ^ctldl\.windowsupdate\.com$
- ^settings-win\.data\.microsoft\.com$
denyList:
- jindlecleanings.xyz
- "*.jindlecleanings.xyz"