diff --git a/ops/nixos/lib/coredns/zones/db.as205479.net b/ops/nixos/lib/coredns/zones/db.as205479.net
index 4cb246ef12..08673492f3 100644
--- a/ops/nixos/lib/coredns/zones/db.as205479.net
+++ b/ops/nixos/lib/coredns/zones/db.as205479.net
@@ -3,7 +3,7 @@
 ; SPDX-License-Identifier: Apache-2.0
 
 ;              MNAME                        RNAME                  SERIAL REFRESH RETRY EXPIRE TTL
-@ 600 IN SOA   frantech-lux01.as205479.net. hostmaster.lukegb.com. 35     600     450   3600   300
+@ 600 IN SOA   frantech-lux01.as205479.net. hostmaster.lukegb.com. 36     600     450   3600   300
 
 ; NB: this are also glue records in Google Domains.
 $INCLUDE tmpl.ns
@@ -18,6 +18,7 @@ $INCLUDE tmpl.ns
 @                   3600 IN A     92.118.28.9
 @                   3600 IN AAAA  2a09:a441::9
 www                 3600 IN CNAME bvm-radius.as205479.net.
+_acme-challenge.www 3600 IN CNAME _acme-challenge.as205479.net.
 
 _acme-challenge     3600 IN NS   ns-cloud-c1.googledomains.com.
 _acme-challenge     3600 IN NS   ns-cloud-c2.googledomains.com.