diff --git a/ops/nixos/lib/coredns/zones/db.as205479.net b/ops/nixos/lib/coredns/zones/db.as205479.net
index 82a7f9180f..b6b0d71cf5 100644
--- a/ops/nixos/lib/coredns/zones/db.as205479.net
+++ b/ops/nixos/lib/coredns/zones/db.as205479.net
@@ -3,7 +3,7 @@
 ; SPDX-License-Identifier: Apache-2.0
 
 ;              MNAME                        RNAME                  SERIAL REFRESH RETRY EXPIRE TTL
-@ 600 IN SOA   frantech-lux01.as205479.net. hostmaster.lukegb.com. 32     600     450   3600   300
+@ 600 IN SOA   frantech-lux01.as205479.net. hostmaster.lukegb.com. 33     600     450   3600   300
 
 ; NB: this are also glue records in Google Domains.
 $INCLUDE tmpl.ns
@@ -14,6 +14,11 @@ $INCLUDE tmpl.ns
 @                   3600 IN MX   10 alt3.aspmx.l.google.com.
 @                   3600 IN MX   10 alt4.aspmx.l.google.com.
 
+_acme-challenge     3600 IN NS   ns-cloud-c1.googledomains.com.
+_acme-challenge     3600 IN NS   ns-cloud-c2.googledomains.com.
+_acme-challenge     3600 IN NS   ns-cloud-c3.googledomains.com.
+_acme-challenge     3600 IN NS   ns-cloud-c4.googledomains.com.
+
 google._domainkey   3600 IN TXT  "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4qBbybMC8qDRiwTORXMvFulOVfHJjbipRzwykC1G1+0eybI8z6NqzNWGqWNugAcRMg7mO/rfU++pqlY5egyw4W6oUdYYy7wmFGO5WX25Hud+rElgJJmEmc+dR4pA4zNpuygde7kD0gL6An3pQudg5MOPYvyg0iaMEJaMREhH7J6dv1Jig1BT6x85HQxElI+OgfN8Aylxv3aZQJHM2Q50Cxm/65kVT7JFlZwUdOiBva1eQLrankbOAMAcBoOwJHxYEocH9JMYu7fkFtMEaz6laTuS4qwbdB8zQHjLYxpjqlkw5xPa1tuyiND9ffmrpec3Heb4NH5wNa9INtR3L131wIDAQAB"
 
 frantech-lux01      3600 IN A    107.189.4.182