diff --git a/ops/nixos/lib/blade-router.nix b/ops/nixos/lib/blade-router.nix
index 030732a0da..ef08070881 100644
--- a/ops/nixos/lib/blade-router.nix
+++ b/ops/nixos/lib/blade-router.nix
@@ -35,7 +35,7 @@ with lib;
       prefixLength = mkOption { type = types.int; default = 24; };
     };
     addresses.br-public-vip.v6 = {
-      addr = mkOption { type = types.str; default = "2a09:a441::ffff"; };
+      addr = mkOption { type = types.str; default = "2a09:a441::1"; };
       prefixLength = mkOption { type = types.int; default = 48; };
     };
     addresses.br-public-vip.v6-ll = {
diff --git a/ops/nixos/lib/coredns/zones/db.1.4.4.a.9.0.a.2.ip6.arpa b/ops/nixos/lib/coredns/zones/db.1.4.4.a.9.0.a.2.ip6.arpa
index c6ff84665a..4fbb0619b3 100644
--- a/ops/nixos/lib/coredns/zones/db.1.4.4.a.9.0.a.2.ip6.arpa
+++ b/ops/nixos/lib/coredns/zones/db.1.4.4.a.9.0.a.2.ip6.arpa
@@ -3,10 +3,10 @@
 ; SPDX-License-Identifier: Apache-2.0
 
 ;              MNAME                        RNAME                  SERIAL REFRESH RETRY EXPIRE TTL
-@ 600 IN SOA   frantech-lux01.as205479.net. hostmaster.lukegb.com. 2      600     450   3600   300
+@ 600 IN SOA   frantech-lux01.as205479.net. hostmaster.lukegb.com. 3      600     450   3600   300
 
 $INCLUDE tmpl.ns
 
-0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 3600 IN PTR gw.public.as205479.net.
+1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 3600 IN PTR gw.public.as205479.net.
 e.f.f.f.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 3600 IN PTR blade-tuvok.public.as205479.net.
 f.f.f.f.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 3600 IN PTR blade-paris.public.as205479.net.
diff --git a/ops/nixos/lib/coredns/zones/db.as205479.net b/ops/nixos/lib/coredns/zones/db.as205479.net
index 4f09e97c84..df00748fd4 100644
--- a/ops/nixos/lib/coredns/zones/db.as205479.net
+++ b/ops/nixos/lib/coredns/zones/db.as205479.net
@@ -3,7 +3,7 @@
 ; SPDX-License-Identifier: Apache-2.0
 
 ;              MNAME                        RNAME                  SERIAL REFRESH RETRY EXPIRE TTL
-@ 600 IN SOA   frantech-lux01.as205479.net. hostmaster.lukegb.com. 9      600     450   3600   300
+@ 600 IN SOA   frantech-lux01.as205479.net. hostmaster.lukegb.com. 10     600     450   3600   300
 
 ; NB: this are also glue records in Google Domains.
 $INCLUDE tmpl.ns
@@ -105,7 +105,7 @@ _ceph-mon._tcp.storage.blade 60   IN SRV  10 10 6789 blade-paris.storage.blade.a
 
 ; public
 gw.public                    3600 IN A    92.118.28.1
-gw.public                    3600 IN AAAA 2a09:a441::
+gw.public                    3600 IN AAAA 2a09:a441::1
 blade-tuvok.public           3600 IN A    92.118.28.253
 blade-tuvok.public           3600 IN AAAA 2a09:a441::fffe
 blade-paris.public           3600 IN A    92.118.28.254