diff --git a/ops/nixos/kerrigan/default.nix b/ops/nixos/kerrigan/default.nix
index e6868bfa13..0dfd7cd4a7 100644
--- a/ops/nixos/kerrigan/default.nix
+++ b/ops/nixos/kerrigan/default.nix
@@ -67,6 +67,9 @@ in
   users.users.lukegb.extraGroups = lib.mkAfter [ "networkmanager" ];
   my.systemType = "aarch64-linux";
 
+  my.ip.tailscale = "100.110.212.70";
+  my.ip.tailscale6 = "fd7a:115c:a1e0:ab12:4843:cd96:626e:d446";
+
   systemd.network.netdevs.br0 = {
     netdevConfig = {
       Name = "br0";
diff --git a/ops/nixos/lib/coredns/zones/db.as205479.net b/ops/nixos/lib/coredns/zones/db.as205479.net
index 300a86d788..413df92be5 100644
--- a/ops/nixos/lib/coredns/zones/db.as205479.net
+++ b/ops/nixos/lib/coredns/zones/db.as205479.net
@@ -3,7 +3,7 @@
 ; SPDX-License-Identifier: Apache-2.0
 
 ;              MNAME                        RNAME                  SERIAL REFRESH RETRY EXPIRE TTL
-@ 600 IN SOA   frantech-lux01.as205479.net. hostmaster.lukegb.com. 52     600     450   3600   300
+@ 600 IN SOA   frantech-lux01.as205479.net. hostmaster.lukegb.com. 53     600     450   3600   300
 
 ; NB: this are also glue records in Google Domains.
 $INCLUDE tmpl.ns
@@ -119,6 +119,8 @@ porcorosso.int      3600 IN A    100.125.26.108
 porcorosso.int      3600 IN AAAA fd7a:115c:a1e0:ab12:4843:cd96:627d:1a6c
 swann.int           3600 IN A    100.102.224.95
 swann.int           3600 IN AAAA fd7a:115c:a1e0:ab12:4843:cd96:6266:e05f
+kerrigan.int        3600 IN A    100.110.212.70
+kerrigan.int        3600 IN AAAA fd7a:115c:a1e0:ab12:4843:cd96:626e:d446
 
 ; misc
 fp-la-pri.int       3600 IN A    208.77.235.186