diff --git a/ansible/roles/minio/files/docker-compose.yml b/ansible/roles/minio/files/docker-compose.yml
index 3617ad2..74b9f66 100644
--- a/ansible/roles/minio/files/docker-compose.yml
+++ b/ansible/roles/minio/files/docker-compose.yml
@@ -14,10 +14,12 @@ services:
       - traefik.http.routers.minio-console.rule=Host(`minio.jakehoward.tech`)
       - traefik.http.routers.minio-console.service=minio-console
       - traefik.http.services.minio-console.loadbalancer.server.port=9090
+      - traefik.http.routers.minio-console.middlewares=tailscale-only@file
 
       - traefik.http.routers.minio-s3.rule=Host(`s3.jakehoward.tech`)
       - traefik.http.routers.minio-s3.service=minio-s3
       - traefik.http.services.minio-s3.loadbalancer.server.port=9000
+      - traefik.http.routers.minio-s3.middlewares=tailscale-only@file
     volumes:
       - /mnt/tank/files/minio:/data
     networks:
diff --git a/terraform/jakehoward.tech.tf b/terraform/jakehoward.tech.tf
index d5bab0b..872140e 100644
--- a/terraform/jakehoward.tech.tf
+++ b/terraform/jakehoward.tech.tf
@@ -259,7 +259,7 @@ resource "gandi_livedns_record" "jakehowardtech_minio" {
   type = "CNAME"
   ttl  = 3600
   values = [
-    "${gandi_livedns_record.sys_domain_pve.name}.${gandi_livedns_record.sys_domain_pve.zone}."
+    "${gandi_livedns_record.sys_domain_pve_private.name}.${gandi_livedns_record.sys_domain_pve_private.zone}."
   ]
 }
 
@@ -269,7 +269,7 @@ resource "gandi_livedns_record" "jakehowardtech_s3" {
   type = "CNAME"
   ttl  = 3600
   values = [
-    "${gandi_livedns_record.sys_domain_pve.name}.${gandi_livedns_record.sys_domain_pve.zone}."
+    "${gandi_livedns_record.sys_domain_pve_private.name}.${gandi_livedns_record.sys_domain_pve_private.zone}."
   ]
 }