diff --git a/profiles/base.nix b/profiles/base.nix
index 3c72e35..a6af2fa 100644
--- a/profiles/base.nix
+++ b/profiles/base.nix
@@ -75,6 +75,24 @@
     "/persistent/etc/ssh/ssh_host_ed25519_key"
   ];
 
+  machine.meta.zones.luj =
+    lib.mkIf
+      (lib.hasAttrByPath [
+        "vpn"
+        "ipv4"
+      ] config.machine.meta.ips)
+      {
+        SOA = {
+          nameServer = "ns";
+          adminEmail = "dns@malka.sh";
+          serial = 0;
+        };
+
+        subdomains.${config.networking.hostName} = {
+          A = [ config.machine.meta.ips.vpn.ipv4 ];
+        };
+      };
+
   system.nixos.label = "${config.system.nixos.release}-${
     let
       repo = builtins.fetchGit ../.;