diff --git a/certs/samba/dc-4k6s8e.pyrocufflink.blue b/certs/samba/dc-4k6s8e.pyrocufflink.blue
new file mode 120000
index 0000000..fdf81bc
--- /dev/null
+++ b/certs/samba/dc-4k6s8e.pyrocufflink.blue
@@ -0,0 +1 @@
+pyrocufflink.blue
\ No newline at end of file
diff --git a/certs/samba/pyrocufflink.blue/samba.cer b/certs/samba/pyrocufflink.blue/samba.cer
new file mode 120000
index 0000000..c42aef2
--- /dev/null
+++ b/certs/samba/pyrocufflink.blue/samba.cer
@@ -0,0 +1 @@
+../../lego/_.pyrocufflink.net.crt
\ No newline at end of file
diff --git a/certs/samba/pyrocufflink.blue/samba.key b/certs/samba/pyrocufflink.blue/samba.key
new file mode 120000
index 0000000..534b743
--- /dev/null
+++ b/certs/samba/pyrocufflink.blue/samba.key
@@ -0,0 +1 @@
+../../lego/_.pyrocufflink.net.key
\ No newline at end of file
diff --git a/hosts b/hosts
index 309ae51..24eeb3c 100644
--- a/hosts
+++ b/hosts
@@ -117,6 +117,7 @@ pxe0.pyrocufflink.blue
 burp1.pyrocufflink.blue
 bw0.pyrocufflink.blue
 cloud0.pyrocufflink.blue
+dc-4k6s8e.pyrocufflink.blue
 dc2.pyrocufflink.blue
 file0.pyrocufflink.blue
 git0.pyrocufflink.blue
@@ -146,6 +147,7 @@ nvr1.pyrocufflink.blue
 serial0.pyrocufflink.blue
 
 [samba-dc]
+dc-4k6s8e.pyrocufflink.blue
 dc2.pyrocufflink.blue
 
 [smtp-relay]
diff --git a/roles/ssh-hostkeys/files/ssh_known_hosts b/roles/ssh-hostkeys/files/ssh_known_hosts
index a5eda33..bd229dd 100644
--- a/roles/ssh-hostkeys/files/ssh_known_hosts
+++ b/roles/ssh-hostkeys/files/ssh_known_hosts
@@ -25,6 +25,9 @@ cloud0.pyrocufflink.blue ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDFtfj3I5+gvUHgLn0
 cm0.pyrocufflink.blue ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBJu4U5OdSbCXwofCCeejxEv5ia4YgzUYI01aXy1cDp9GcndmmwZl0NHbF815G98YK3O16Kv4nTV4IEUF7JJu0/s=
 cm0.pyrocufflink.blue ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICb5SUiJ3yFQlXlqmxV18ZrfFD1z1/Nov2IJG9Y2snUd
 cm0.pyrocufflink.blue ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC07DmchhYaGlFpawpS2hswPKioVlPkLObalQ3jx/TTENu2sLNcBUzVR6y2H82EnWOjnHDOYwdKPbHjjFtOQTr8wYJlOpw75v2DesUmvn8aPhz8XMKO4M9HuwPvgo6ybc9r+VEQgm3H9LLCDSMojkkO04T0KGuAyUfV2kYnLWzjclyUXgYGNqnmHatEn1WAU8olKkyP+CImvQTctisIF9rJotBNV+f4UO7NvioaieUyBCoWlHBGUMI18m12zaoItaMoV8WHlksXoQek9EWrioC/W51nFusDr1Cwmtwz/20mtiiYn5upUz0MtEc8FFvAk7jlpFPAB1dGZMPyLXaWHKjJ
+dc-4k6s8e.pyrocufflink.blue ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBAw4EJWVghdzN59FD3TGzCGltrKTP9EGgtJ6PSh3MPxFB+4Muy2yv0dK2J2hsLudt0pUYEsBRrXWj//XsYqjiRg=
+dc-4k6s8e.pyrocufflink.blue ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKVDGeSqCFxxo5FE90XrKy5bzrZLSC3V5K/xFMayucH6
+dc-4k6s8e.pyrocufflink.blue ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCTd13ENn65Sml4WNL0NpCI9k19X0qP8VA0d6bbIyDc+E9JLah8tOpuUpPg0v0iBN0IsJW4lW2r/bhJXFD4Yjn0kXXdZ1SYN5FHMtqQaA92KckND5GYLVvTrrim6EHOuyDwNCs513mhHhZlu6noXPpI1CY23lxVGzobAwg1Qg1Tmswv2g46lmLZOVIlXSs2hytxXF2VhyuINhoGYok6nugmO+mgEkBChhqGlqjlZA5+1Ko6O7VEhIHRrHktOyygBxqm7gwh5KMOn1FRoDqdnv2yTSHc0GzuscdLJ2pYIbN5o8ckODxIUpLdpjjfTvqGAEqQ3yHh33J/IHul7sbNiguQeTMViqlf3esTz5ifPNeyJDDriVuaOnDS0UfvsSbTKn7Zcx+nAc9UOcXmlqdZyO+L8zN+EBDgfRvndf2WS83BMy9KFqeKktR6GEA8Y9PQ3YldQTvVr4HfAsNMx4lbg+es4S+qNXYz8woRJRmSGez+POWraMhEunAuwjQ9QMaraJ8=
 dc0.pyrocufflink.blue ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBCtdS00iqtmsqr5LFfEPkGExy+tRjCHlZ7vPTnOgidj2eODrG4exIWVbTv9Pi5IU0O1s3tXV7CZL6+i/aeINbiQ=
 dc0.pyrocufflink.blue ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKJvT2o/50a+yWMWW3Jo3MrdjlAD63Rg7RwAlzd/yDjp
 dc0.pyrocufflink.blue ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/xB+Sb7RncmEgIhx30TKNFFBuaJrNsoX3u2Wx0X7Y3ARWLJm9+e5dAOgOuHHcv81+2w+bDwRgiSVuqnmtapUbEFKQ9DQCeS1FcdDQnxa+B9rLD0m9RTNJDCbeiw09CMrAOrh9k2pKnheNbR4BBNpRIeq1PjBkfAormGkcuDgx+VLWQVCuZ01VM95KkVPg0T0lbSwl6XvKB19KoZrxWbJ5MDFgQVCwNpDExuEju0OnL/XhENeOuZc5b0Xeo9jiNitGmu7QoeHLAiv1jCm6XGeJXFN1ht0dmwe8bU8IPsQ1REALec3GptJ364Hj8OJlE5YWDqDb9NbIWPIG7sQhcLbF