--- a/templates/dnsmasq/hosts.j2	Sat Sep 02 00:06:02 2023 -0700
+++ b/templates/dnsmasq/hosts.j2	Sat Sep 02 00:06:49 2023 -0700
@@ -4,8 +4,13 @@
 
 # This is the dns trick-- hosts at home should use the local address
 # for 'bigasterisk.com' etc instead of taking a trip to prime.
-10.2.0.1 bang bang.bigasterisk.com bigasterisk.com cam-int.bigasterisk.com cam-ext.bigasterisk.com imap.bigasterisk.com repo.bigasterisk.com drewp.quickwitretort.com photo.bigasterisk.com projects.bigasterisk.com quickwitretort.com whatsplayingnext.com whopickedthis.com vpn-home.bigasterisk.com file.bigasterisk.com antigen-superset.bigasterisk.com authenticate.bigasterisk.com authenticate2.bigasterisk.com authenticate3.bigasterisk.com megasecond.club hass.bigasterisk.com bitwarden.bigasterisk.com
+10.2.0.1 bang bang.bigasterisk.com bigasterisk.com cam-int.bigasterisk.com cam-ext.bigasterisk.com imap.bigasterisk.com repo.bigasterisk.com drewp.quickwitretort.com photo.bigasterisk.com projects.bigasterisk.com quickwitretort.com whatsplayingnext.com whopickedthis.com vpn-home.bigasterisk.com file.bigasterisk.com antigen-superset.bigasterisk.com authenticate.bigasterisk.com authenticate2.bigasterisk.com authenticate3.bigasterisk.com megasecond.club hass.bigasterisk.com bitwarden.bigasterisk.com 
 
+# VIPs on ditto
+10.2.0.11 mqtt1 mqtt1.bigasterisk.com
+10.2.0.12 mqtt2 mqtt2.bigasterisk.com
+10.2.0.13 mqtt3 mqtt3.bigasterisk.com 
+10.2.0.14 mqtt4 mqtt4.bigasterisk.com
 
 # sync with /my/proj/infra/inventory.py
 # and with templates/wireguard/wg0.conf.j2
@@ -25,6 +30,7 @@
 # Hosts with fixed addrs who don't introduce via dhcp:
 # 162.243.138.136   prime.bigasterisk.com
 10.2.0.3 pipe pipe.bigasterisk.com
+10.2.0.133 ditto ditto.bigasterisk.com
 {% endif %}
 
 {% if net == '10.5' %}