diff --git a/ansible/roles/dnsmasq/files/dnsmasq.conf b/ansible/roles/dnsmasq/files/dnsmasq.conf
index af3a689..f47f033 100644
--- a/ansible/roles/dnsmasq/files/dnsmasq.conf
+++ b/ansible/roles/dnsmasq/files/dnsmasq.conf
@@ -21,6 +21,7 @@ dhcp-host=ca:fe:c0:ff:ee:03,max,192.168.30.3
 dhcp-host=ca:fe:c0:ff:ee:08,maestro,192.168.30.8
 dhcp-host=d8:5e:d3:47:33:6e,lewis
 dhcp-host=ca:fe:c0:ff:ee:0b,alexander
+dhcp-host=dc:a6:32:7b:e2:11,iris,192.168.30.9
 # Advertise router
 dhcp-option=3,192.168.30.1
 # Always send the IPv6 DNS server address (this machine)
diff --git a/ansible/roles/nsd/files/zones/geokunis2.nl b/ansible/roles/nsd/files/zones/geokunis2.nl
index 5cf8f60..7a1b654 100644
--- a/ansible/roles/nsd/files/zones/geokunis2.nl
+++ b/ansible/roles/nsd/files/zones/geokunis2.nl
@@ -1,29 +1,38 @@
 $ORIGIN geokunis2.nl.
 $TTL 60
 
-geokunis2.nl.	IN	SOA	ns.geokunis2.nl. niels.kunis.nl. 2023050400 1800 3600 1209600 3600
-			NS	ns.geokunis2.nl.
-			NS	ns0.transip.net.
-			NS	ns1.transip.nl.
-			NS	ns2.transip.eu.
-			A	84.245.14.149
-			AAAA	2a02:58:19a:f730:b62e:99ff:fe77:1bda
-;			MX	0 .
-;			TXT	"v=spf1 -all"
-			CAA	0 issue "letsencrypt.org"
-mail		IN	A 84.245.14.149
-			MX	10	mail.geokunis2.nl
-jenl		IN	A	217.123.41.225
-wg			IN	A	84.245.14.149
-wg			IN	AAAA	2a02:58:1:e::1afb
-wg4			IN	A	84.245.14.149
-wg6			IN	AAAA	2a02:58:1:e::1afb
-kms			IN	A	84.245.14.149
-files		IN	A	84.245.14.149
-files		IN	AAAA 2a02:58:19a:f730:b62e:99ff:fe77:1bda
-_dmarc		IN	TXT	"v=DMARC1; p=reject; fo=0; adkim=s; aspf=s; pct=100; rf=afrf; sp=reject"
-ns			A	84.245.14.149
-			AAAA	2a02:58:19a:f730:c8fe:c0ff:feff:ee07
-cyberchef	IN	A	84.245.14.149
-			AAAA	2a02:58:19a:f730:c8fe:c0ff:feff:ee03
-inbucket	IN	A	84.245.14.149
+geokunis2.nl.		IN	SOA	ns.geokunis2.nl. niels.kunis.nl. 2023050400 1800 3600 1209600 3600
+				NS	ns.geokunis2.nl.
+				NS	ns0.transip.net.
+				NS	ns1.transip.nl.
+				NS	ns2.transip.eu.
+				A	84.245.14.149
+				AAAA	2a02:58:19a:f730:b62e:99ff:fe77:1bda
+;				TXT	"v=spf1 -all"
+				CAA	0 issue "letsencrypt.org"
+mail			IN	A 84.245.14.149
+				MX	10	mail.geokunis2.nl
+jenl			IN	A	217.123.41.225
+wg				IN	A	84.245.14.149
+wg				IN	AAAA	2a02:58:1:e::1afb
+wg4				IN	A	84.245.14.149
+wg6				IN	AAAA	2a02:58:1:e::1afb
+kms				IN	A	84.245.14.149
+files			IN	A	84.245.14.149
+files			IN	AAAA 2a02:58:19a:f730:b62e:99ff:fe77:1bda
+ns				A	84.245.14.149
+				AAAA	2a02:58:19a:f730:c8fe:c0ff:feff:ee07
+cyberchef		IN	A	84.245.14.149
+				AAAA	2a02:58:19a:f730:c8fe:c0ff:feff:ee03
+inbucket		IN	A	84.245.14.149
+
+; proton shizzle
+@			IN	TXT	"protonmail-verification=e712bb186d5278b3775b413b8851ffc7740e845b"
+@			IN	TXT	"sl-verification=sgrkojlcdgroiyjihxfleicgtpzgcb"
+@			IN	MX	10 mx1.simplelogin.co.
+@			IN	MX	20 mx2.simplelogin.co.
+@			IN	TXT	"v=spf1 include:simplelogin.co ~all"
+dkim02._domainkey	IN	CNAME	dkim02._domainkey.simplelogin.co.
+dkim._domainkey		IN	CNAME	dkim._domainkey.simplelogin.co.
+dkim03._domainkey	IN	CNAME	dkim03._domainkey.simplelogin.co.
+_dmarc			IN	TXT	"v=DMARC1; p=quarantine; pct=100; adkim=s; aspf=s"