you have to setup auth DNS with xyz.local and use it in air-gapped environments for your alert mails

True, but I was talking more about creating DNS entries for NPM (and other package managers) and redirecting them to our internal services. I just thought it was funny to mention since we impersonate public sites on our internal air-gapped network.