diff --git a/skylab/infra/playbooks/terraform/domain.scipiocapital.tf b/skylab/infra/playbooks/terraform/domain.scipiocapital.tf
index c468088..b23a892 100644
--- a/skylab/infra/playbooks/terraform/domain.scipiocapital.tf
+++ b/skylab/infra/playbooks/terraform/domain.scipiocapital.tf
@@ -36,6 +36,14 @@ resource "digitalocean_record" "scipiocapital_docs" {
   ttl    = 43200
 }
 
+resource "digitalocean_record" "scipiocapital_auth" {
+  domain = digitalocean_domain.scipiocapital.id
+  type   = "CNAME"
+  name   = "auth"
+  value  = "${digitalocean_record.enp_en1.fqdn}."
+  ttl    = 43200
+}
+
 # ==========================================================================
 # Standard DO configuration for all managed domains, includes
 # NS records and SOA