diff --git a/cluster/services/dns/default.nix b/cluster/services/dns/default.nix
index 9db80ec..6786ad2 100644
--- a/cluster/services/dns/default.nix
+++ b/cluster/services/dns/default.nix
@@ -21,7 +21,7 @@ in
   services.dns = {
     nodes = {
       master = [ "VEGAS" ];
-      slave = [ "prophet" ];
+      slave = [ "checkmate" "prophet" ];
       coredns = [ "VEGAS" ];
       client = [ "VEGAS" "prophet" ];
     };
diff --git a/cluster/services/dns/pdns-db-credentials.age b/cluster/services/dns/pdns-db-credentials.age
index 3a28f99..89d4cbe 100644
Binary files a/cluster/services/dns/pdns-db-credentials.age and b/cluster/services/dns/pdns-db-credentials.age differ
diff --git a/cluster/services/patroni/default.nix b/cluster/services/patroni/default.nix
index d127a56..5b1190d 100644
--- a/cluster/services/patroni/default.nix
+++ b/cluster/services/patroni/default.nix
@@ -16,7 +16,7 @@
   services.patroni = {
     nodes = {
       worker = [ "VEGAS" "prophet" ];
-      haproxy = [ "VEGAS" "prophet" ];
+      haproxy = [ "checkmate" "VEGAS" "prophet" ];
     };
     nixos = {
       worker = ./worker.nix;
diff --git a/secrets.nix b/secrets.nix
index b17c593..e2ac239 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -8,7 +8,7 @@ in with hosts;
   "cluster/services/dns/pdns-admin-salt.age".publicKeys = max ++ map systemKeys [ VEGAS ];
   "cluster/services/dns/pdns-admin-secret.age".publicKeys = max ++ map systemKeys [ VEGAS ];
   "cluster/services/dns/pdns-api-key.age".publicKeys = max ++ map systemKeys [ checkmate VEGAS prophet ];
-  "cluster/services/dns/pdns-db-credentials.age".publicKeys = max ++ map systemKeys [ VEGAS prophet ];
+  "cluster/services/dns/pdns-db-credentials.age".publicKeys = max ++ map systemKeys [ checkmate VEGAS prophet ];
   "cluster/services/hercules-ci-multi-agent/secrets/hci-cache-config.age".publicKeys = max ++ map systemKeys [ VEGAS prophet ];
   "cluster/services/hercules-ci-multi-agent/secrets/hci-cache-credentials-prophet.age".publicKeys = max ++ map systemKeys [ prophet ];
   "cluster/services/hercules-ci-multi-agent/secrets/hci-cache-credentials-VEGAS.age".publicKeys = max ++ map systemKeys [ VEGAS ];