diff --git a/ops/nixos/lib/blade.nix b/ops/nixos/lib/blade.nix
index fbedc93176..a07de2f30c 100644
--- a/ops/nixos/lib/blade.nix
+++ b/ops/nixos/lib/blade.nix
@@ -72,6 +72,10 @@ in {
     networking = {
       domain = "blade.as205479.net";
       nameservers = ["8.8.8.8" "8.8.4.4"];
+      search = mkBefore [
+        "blade.as205479.net"
+        "storage.blade.as205479.net"
+      ];
       useDHCP = false;
       bridges = let
         br = interfaces: { interfaces = lib.mkDefault interfaces; rstp = false; };
diff --git a/ops/nixos/lib/coredns/zones/db.as205479.net b/ops/nixos/lib/coredns/zones/db.as205479.net
index 07e5bfc576..f62a84622b 100644
--- a/ops/nixos/lib/coredns/zones/db.as205479.net
+++ b/ops/nixos/lib/coredns/zones/db.as205479.net
@@ -3,7 +3,7 @@
 ; SPDX-License-Identifier: Apache-2.0
 
 ;              MNAME                        RNAME                  SERIAL REFRESH RETRY EXPIRE TTL
-@ 600 IN SOA   frantech-lux01.as205479.net. hostmaster.lukegb.com. 4      600     450   3600   300
+@ 600 IN SOA   frantech-lux01.as205479.net. hostmaster.lukegb.com. 5      600     450   3600   300
 
 ; NB: this are also glue records in Google Domains.
 $INCLUDE tmpl.ns
@@ -61,6 +61,46 @@ porcorosso-win.int  3600 IN A    100.93.164.79
 porcorosso.int      3600 IN A    100.125.26.108
 swann.int           3600 IN A    100.102.224.95
 
+; blade internal
+blade-kim.blade              3600 IN A    10.100.0.101
+blade-kim-ilo.blade          3600 IN A    10.100.1.101
+blade-kim.storage.blade      3600 IN A    10.100.2.101
+
+blade-paris.blade            3600 IN A    10.100.0.102
+blade-paris-ilo.blade        3600 IN A    10.100.1.102
+blade-paris.storage.blade    3600 IN A    10.100.2.102
+
+blade-janeway.blade          3600 IN A    10.100.0.103
+blade-janeway-ilo.blade      3600 IN A    10.100.1.103
+blade-janeway.storage.blade  3600 IN A    10.100.2.103
+
+blade-chakotay.blade         3600 IN A    10.100.0.105
+blade-chakotay-ilo.blade     3600 IN A    10.100.1.105
+blade-chakotay.storage.blade 3600 IN A    10.100.2.105
+
+blade-tuvok.blade            3600 IN A    10.100.0.106
+blade-tuvok-ilo.blade        3600 IN A    10.100.1.106
+blade-tuvok.storage.blade    3600 IN A    10.100.2.106
+
+blade-torres.blade           3600 IN A    10.100.0.108
+blade-torres-ilo.blade       3600 IN A    10.100.1.108
+blade-torres.storage.blade   3600 IN A    10.100.2.108
+
+bvm-nixosmgmt.blade          3600 IN A    10.100.0.200
+bvm-twitterchiver.blade      3600 IN A    10.100.0.201
+bvm-prosody.blade            3600 IN A    10.100.0.202
+bvm-ipfs.blade               3600 IN A    10.100.0.203
+
+; services
+; ceph-mon: blade-tuvok, blade-janeway, blade-paris
+ceph-mon.storage.blade       60   IN A    10.100.2.106
+ceph-mon.storage.blade       60   IN A    10.100.2.103
+ceph-mon.storage.blade       60   IN A    10.100.2.102
+_ceph-mon._tcp.storage.blade 60   IN SRV  10 10 6789 blade-tuvok.storage.blade.as205479.net.
+_ceph-mon._tcp.storage.blade 60   IN SRV  10 10 6789 blade-janeway.storage.blade.as205479.net.
+_ceph-mon._tcp.storage.blade 60   IN SRV  10 10 6789 blade-paris.storage.blade.as205479.net.
+
+
 92-118-28-0.ptr 6000 IN A 92.118.28.0
 92-118-28-1.ptr 6000 IN A 92.118.28.1
 92-118-28-2.ptr 6000 IN A 92.118.28.2