diff --git a/kubernetes/apps/default/atuin/app/helmrelease.yaml b/kubernetes/apps/default/atuin/app/helmrelease.yaml
index 00c96bc22..6e4fe4cb2 100644
--- a/kubernetes/apps/default/atuin/app/helmrelease.yaml
+++ b/kubernetes/apps/default/atuin/app/helmrelease.yaml
@@ -70,7 +70,10 @@ spec:
             port: *port
     route:
       app:
-        hostnames: ["sh.${SECRET_EXTERNAL_DOMAIN}"]
+        annotations:
+          external-dns.alpha.kubernetes.io/hostname: &host sh.${SECRET_EXTERNAL_DOMAIN}
+        hostnames:
+          - *host
         parentRefs:
           - name: internal
             namespace: network
diff --git a/kubernetes/apps/network/opnsense-dns/app/helmrelease.yaml b/kubernetes/apps/network/opnsense-dns/app/helmrelease.yaml
index ff0430318..753b84089 100644
--- a/kubernetes/apps/network/opnsense-dns/app/helmrelease.yaml
+++ b/kubernetes/apps/network/opnsense-dns/app/helmrelease.yaml
@@ -78,6 +78,8 @@ spec:
             cpu: 10m
           limits:
             memory: 100Mi
+    extraArgs:
+      - --managed-record-types=A,AAAA
     policy: upsert-only
     registry: noop
     sources: ["gateway-httproute", "service"]