diff --git a/REFACTOR_PLAN.md b/REFACTOR_PLAN.md
index 9d3044c..14da434 100644
--- a/REFACTOR_PLAN.md
+++ b/REFACTOR_PLAN.md
@@ -176,7 +176,14 @@ Per the "trace references before declaring obsolete" rule — **none of the
 invisible to Argo CD. The only things that look genuinely obsolete or
 redundant are:
 
-- `nik4nao.home.arpa` DNS entry (both pihole values files) — no backing resource found anywhere.
+- ~~`nik4nao.home.arpa` DNS entry~~ — **WRONG, corrected 2026-07-23**: this
+  points at `192.168.7.183` (nik-debian's raw IP) for a host-level SMB/Samba
+  share, not a Kubernetes Service — there was never going to be a
+  Certificate/Ingress/IngressRoute for it, so "no K8s resource references it"
+  was the wrong test entirely. It was removed from both pihole values files
+  and broke real SMB access; restored. Lesson: that specific check only
+  proves a hostname isn't routed through Traefik, not that it's unused —
+  doesn't apply to raw-IP entries for non-HTTP/non-K8s services.
 - `ansible/ansible.cfg` — not obsolete exactly, but its only real-world effect today is negative (breaks documented commands); candidate for deletion/merge into the root cfg.
 - `ansible/roles/nvidia/templates/k3s-containerd-config.toml.j2` — orphaned template, either finish wiring it up or remove it once GPU passthrough status is confirmed live.
 - `.DS_Store` at repo root and in `config/` — should never have been committed; harmless but should be `git rm --cached`.
diff --git a/values/pihole-debian.yaml b/values/pihole-debian.yaml
index 630904f..e53b34a 100644
--- a/values/pihole-debian.yaml
+++ b/values/pihole-debian.yaml
@@ -37,6 +37,7 @@ dnsmasq:
     - address=/gitea.home.arpa/192.168.7.77
     - address=/pihole.home.arpa/192.168.7.77
     - address=/home.arpa/192.168.7.77
+    - address=/nik4nao.home.arpa/192.168.7.183
     - address=/dashy.home.arpa/192.168.7.77
     - address=/jellyfin.home.arpa/192.168.7.77
     - address=/qbittorrent.home.arpa/192.168.7.77
diff --git a/values/pihole.yaml b/values/pihole.yaml
index d900011..cd3ca12 100644
--- a/values/pihole.yaml
+++ b/values/pihole.yaml
@@ -68,6 +68,7 @@ dnsmasq:
     - address=/gitea.home.arpa/192.168.7.77
     - address=/pihole.home.arpa/192.168.7.77
     - address=/home.arpa/192.168.7.77
+    - address=/nik4nao.home.arpa/192.168.7.183
     - address=/dashy.home.arpa/192.168.7.77
     - address=/jellyfin.home.arpa/192.168.7.77
     - address=/qbittorrent.home.arpa/192.168.7.77