diff --git a/flake.lock b/flake.lock
index 0566f82..376f488 100644
--- a/flake.lock
+++ b/flake.lock
@@ -20,11 +20,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1728279793,
-        "narHash": "sha256-W3D5YpNrUVTFPVU4jiEiboaaUDShaiH5fRl9aJLqUnU=",
+        "lastModified": 1728538411,
+        "narHash": "sha256-f0SBJz1eZ2yOuKUr5CA9BHULGXVSn6miBuUWdTyhUhU=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "f85a2d005e83542784a755ca8da112f4f65c4aa4",
+        "rev": "b69de56fac8c2b6f8fd27f2eca01dcda8e0a4221",
         "type": "github"
       },
       "original": {
diff --git a/modules/domain/main.tf b/modules/domain/main.tf
index 308210c..61f5ed5 100644
--- a/modules/domain/main.tf
+++ b/modules/domain/main.tf
@@ -35,24 +35,26 @@ resource "aws_route53_record" "ipv4" {
   depends_on = [
     data.aws_route53_zone.select,
   ]
-  count   = local.ipv4ds
-  zone_id = local.zone_id
-  name    = local.content
-  type    = "A"
-  ttl     = 30
-  records = local.ips
+  count           = local.ipv4ds
+  zone_id         = local.zone_id
+  name            = local.content
+  type            = "A"
+  ttl             = 30
+  records         = local.ips
+  allow_overwrite = true
 }
 
 resource "aws_route53_record" "ipv6" {
   depends_on = [
     data.aws_route53_zone.select,
   ]
-  count   = local.ipv6
-  zone_id = local.zone_id
-  name    = local.content
-  type    = "AAAA"
-  ttl     = 30
-  records = local.ips
+  count           = local.ipv6
+  zone_id         = local.zone_id
+  name            = local.content
+  type            = "AAAA"
+  ttl             = 30
+  records         = local.ips
+  allow_overwrite = true
 }
 
 # cert generation