diff --git a/nixbld-etc-nixos/named/200-29.98.206.103.in-addr.arpa b/nixbld-etc-nixos/named/200-29.98.206.103.in-addr.arpa
index da66cad..c28a5d6 100644
--- a/nixbld-etc-nixos/named/200-29.98.206.103.in-addr.arpa
+++ b/nixbld-etc-nixos/named/200-29.98.206.103.in-addr.arpa
@@ -1,7 +1,7 @@
 $TTL 7200
 
 @						SOA	NS.XN--WBTZ5WPQAJ35CFXC.XN--J6W193G. sb.m-labs.hk. (
-							2023092801
+							2024010901
 							7200
 							3600
 							86400
@@ -10,9 +10,11 @@ $TTL 7200
 
 						NS		NS.XN--WBTZ5WPQAJ35CFXC.XN--J6W193G.
 						NS		ns1.he.net.
+						CAA		0 issue "letsencrypt.org; accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/496268470"
 
 200	PTR	router.alt.m-labs.hk.
 201	PTR	stewardship1.alt.m-labs.hk.
 202	PTR	stewardship2.alt.m-labs.hk.
 203	PTR	atse.alt.m-labs.hk.
 204	PTR	nasty-gareth.alt.m-labs.hk.
+205	PTR	zynq.alt.m-labs.hk.
diff --git a/nixbld-etc-nixos/named/m-labs.hk b/nixbld-etc-nixos/named/m-labs.hk
index eeea891..22a0368 100644
--- a/nixbld-etc-nixos/named/m-labs.hk
+++ b/nixbld-etc-nixos/named/m-labs.hk
@@ -1,7 +1,7 @@
 $TTL 7200
 
 @						SOA	NS.XN--WBTZ5WPQAJ35CFXC.XN--J6W193G. sb.m-labs.hk. (
-							2023092801
+							2024010901
 							7200
 							3600
 							86400
@@ -17,6 +17,7 @@ $TTL 7200
 						MX		10 mail.m-labs.hk.
 						TXT		"v=spf1 mx a:router.alt.m-labs.hk -all"
 						TXT		"google-site-verification=Tf_TEGZLG7-2BE70hMjLnzjDZ1qUeUZ6vxzbl1sagT8"
+						CAA		0 issue "letsencrypt.org; accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/496268470"
 
 
 mail					A		94.190.212.123
@@ -57,3 +58,4 @@ stewardship1.alt		A		103.206.98.201
 stewardship2.alt		A		103.206.98.202
 atse.alt				A		103.206.98.203
 nasty-gareth.alt		A		103.206.98.204
+zynq.alt				A		103.206.98.205
diff --git a/nixbld-etc-nixos/named/m-labs.ph b/nixbld-etc-nixos/named/m-labs.ph
index a32251a..37adb97 100644
--- a/nixbld-etc-nixos/named/m-labs.ph
+++ b/nixbld-etc-nixos/named/m-labs.ph
@@ -1,7 +1,7 @@
 $TTL 7200
 
 @						SOA	ns1.m-labs.ph. sb.m-labs.hk. (
-							2023090301
+							2024010901
 							7200
 							3600
 							86400
@@ -16,6 +16,7 @@ $TTL 7200
 						MX		10 mail.m-labs.hk.
 						TXT		"v=spf1 mx a:router.alt.m-labs.hk -all"
 						TXT		"google-site-verification=g2k8M1fhbYOPs4C37SeGCfNlD6paWcexamji1DXrp0o"
+						CAA		0 issue "letsencrypt.org; accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/496268470"
 
 ns1						A		94.190.212.123
 ns1						AAAA	2001:470:18:390::2
diff --git a/nixbld-etc-nixos/named/malloctech.fr b/nixbld-etc-nixos/named/malloctech.fr
index c910092..df5c90e 100644
--- a/nixbld-etc-nixos/named/malloctech.fr
+++ b/nixbld-etc-nixos/named/malloctech.fr
@@ -1,7 +1,7 @@
 $TTL 7200
 
 @						SOA	ns.malloctech.fr. sb.m-labs.hk. (
-							2023121302
+							2024010901
 							7200
 							3600
 							86400
@@ -14,6 +14,7 @@ $TTL 7200
 						MX		10 mail.m-labs.hk.
 						TXT		"v=spf1 mx a:router.alt.m-labs.hk -all"
 						TXT		"google-site-verification=LALF-fafTnmkL-18m3CzwFjSwEV1C7NeKexiNfMYsOw"
+						CAA		0 issue "letsencrypt.org; accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/496268470"
 
 ns						A		94.190.212.123
 ns						AAAA	2001:470:18:390::2