diff --git a/deploy/k8s/00-config.yaml b/deploy/k8s/00-config.yaml
index 2adabbe..10d36dd 100644
--- a/deploy/k8s/00-config.yaml
+++ b/deploy/k8s/00-config.yaml
@@ -40,6 +40,13 @@ data:
 
     upstream:
       forward_zones:
+        # The LAN domain (RFC 8375); the router answers these names itself.
+        - zone: home.arpa
+          servers:
+            - addr: 10.10.0.1:53
+              proto: udp
+        # Legacy LAN domain: remove once nothing resolves *.local through the
+        # router any more (unanswered names stall for the upstream timeout).
         - zone: local
           servers:
             - addr: 10.10.0.1:53