How to Safely Configure NextDNS for Cloudstream Repositories

Hello everyone,

I am currently using the Cloudstream application on my device and absolutely love its functionality. To manage my extensions, I am setting up several external Cloudstream repositories. However, privacy and security are a major priority for me, which is why I use NextDNS across all my devices.

I want to make sure my configuration is fully optimized so that the repositories stream smoothly without triggering false positives, while still keeping malicious tracking or phishing links at bay.

Could the community guide me on the following:

1. Which specific NextDNS Security and Privacy blocklists (e.g., oISD, NextDNS Recommended, Anudeep, etc.) work best with Cloudstream repo URLs without causing random breaks?

2. Are there any known false-positive domains or CDNs that I should preemptively add to my Allowlist?

3. Does enabling features like AI-Driven Threat Intelligence or Native Tracking Protection affect the loading of extensions?

If anyone has a tried-and-tested profile or config guide for this specific setup, please share your thoughts or screenshots below. Your help would be highly appreciated!