Ansible would be pretty good tool to make sure the files contain the portions and settings you manually maintain. I wonder how much it would overlap with maintaining other settings as well.Perhaps one day there will be ansible network module for OPNSense so that all settings may be automatized and version controlled. DNS blaclists would be good starting point.