diff --git a/apps/base/bind-internal/resolvers/acls.yaml b/apps/base/bind-internal/resolvers/acls.yaml
index 66b8ad5..c2f8eaa 100644
--- a/apps/base/bind-internal/resolvers/acls.yaml
+++ b/apps/base/bind-internal/resolvers/acls.yaml
@@ -13,6 +13,9 @@ spec:
     - 198.18.21.160/27
     - 198.18.2.192/27
     - 198.18.21.192/27
+    # Admin/management access
+    - 10.10.12.200/32   # benvin workstation (wireguard)
+    - 198.18.21.160/32  # benvin router (also within 198.18.21.160/27 above)
     - 198.18.13.0/24
     - 198.18.14.0/24
     - 198.18.15.0/24