diff --git a/ops/nixos/lib/coredns/zones/db.as205479.net b/ops/nixos/lib/coredns/zones/db.as205479.net
index e2461b972f..77fafb3e9c 100644
--- a/ops/nixos/lib/coredns/zones/db.as205479.net
+++ b/ops/nixos/lib/coredns/zones/db.as205479.net
@@ -3,7 +3,7 @@
 ; SPDX-License-Identifier: Apache-2.0
 
 ;              MNAME                        RNAME                  SERIAL REFRESH RETRY EXPIRE TTL
-@ 600 IN SOA   frantech-lux01.as205479.net. hostmaster.lukegb.com. 30     600     450   3600   300
+@ 600 IN SOA   frantech-lux01.as205479.net. hostmaster.lukegb.com. 31     600     450   3600   300
 
 ; NB: this are also glue records in Google Domains.
 $INCLUDE tmpl.ns
@@ -178,6 +178,7 @@ bvm-radius.public            3600 IN CNAME bvm-radius.as205479.net.
 bvm-radius                   3600 IN A     92.118.28.9
 bvm-radius                   3600 IN AAAA  2a09:a441::9
 radius                       3600 IN CNAME bvm-radius.as205479.net.
+@                            3600 IN NAPTR 100 10 "s" "x-eduroam:radius.tls" "" _radsec._tcp.roaming.ja.net.
 
 92-118-28-0.ptr 6000 IN A 92.118.28.0
 92-118-28-1.ptr 6000 IN A 92.118.28.1