diff --git a/hosts/raptus/headscale.nix b/hosts/raptus/headscale.nix
index 95ec8c4..6e3f64a 100644
--- a/hosts/raptus/headscale.nix
+++ b/hosts/raptus/headscale.nix
@@ -52,6 +52,10 @@ mkIf config.services.headscale.enable {
         dns_config = {
           override_local_dns = true;
           magic_dns = true;
+
+          # FIX: shan being down takes down entire tailnet
+          # 1 -> move dns to dedicated device
+          # 2 -> find out if fallback dns's are supported by headscale
           nameservers = [
             "100.64.0.4"
           ];
@@ -69,6 +73,11 @@ mkIf config.services.headscale.enable {
                 type = "A";
                 value = "100.64.0.4";
               }
+              {
+                name = "git.ccnlc.eu";
+                type = "A";
+                value = "100.64.0.3";
+              }
             ]
             # Tailscale doesn't seem to support wildcard A/AAAA records
             # - https://github.com/juanfont/headscale/issues/2159#issuecomment-2393406444