diff --git a/machines/cj/configuration.nix b/machines/cj/configuration.nix
index 701a493..0e70c92 100644
--- a/machines/cj/configuration.nix
+++ b/machines/cj/configuration.nix
@@ -54,6 +54,13 @@
     # networking.hostId is required for ZFS
     hostId = "d9aef7b3";
 
+    # Aliases subdomains we serve here. Since we bypass pihole locally to avoid
+    # circular lookups, we can set local addresses here instead of using local
+    # dns in pihole (or global dns which would resolve to our WAN ips).
+    extraHosts = ''
+      127.0.0.1 git.jhink.org vault.jhink.org home.jhink.org
+      '';
+
 
     # The global useDHCP flag is deprecated, therefore explicitly set to false here. Per-interface useDHCP will be mandatory in the future, so this generated config replicates the default behaviour.
     useDHCP = false;