# Essential infrastructure domains
# Included by all profiles as a dependency

# DNS root servers (for DNSSEC validation)
root-servers.net

# NTP time synchronization
pool.ntp.org
time.google.com
time.cloudflare.com

# Certificate revocation / OCSP
ocsp.digicert.com
ocsp.pki.goog
ocsp.sectigo.com
r3.o.lencr.org

# Ubuntu/Debian package repos
archive.ubuntu.com
security.ubuntu.com
deb.debian.org

# Fedora/RHEL package repos
mirrors.fedoraproject.org
dl.fedoraproject.org

# Alpine package repos
dl-cdn.alpinelinux.org
