diff --git a/phpunit.xml b/phpunit.xml
index e1bffaa..bbd3a88 100644
--- a/phpunit.xml
+++ b/phpunit.xml
@@ -35,6 +35,14 @@
              an invalid signature. The two tests that DO exercise verification
              set the secret themselves. -->
         <env name="STRIPE_WEBHOOK_SECRET" value="" force="true"/>
+        <!-- Pinned so the suite stops depending on the operator's .env. It did:
+             HostStepsTest asserted `fsn-01.node.clupilot.com` and passed only
+             because this server's .env carried the wrong zone. Correcting the
+             .env turned a green test red without a line of production code
+             changing — a test that reads the developer's machine proves
+             nothing about the code. The value is the one the code itself
+             defaults to. -->
+        <env name="CLUPILOT_DNS_ZONE" value="clupilot.cloud" force="true"/>
         <env name="APP_MAINTENANCE_DRIVER" value="file"/>
         <env name="BCRYPT_ROUNDS" value="4" force="true"/>
         <env name="BROADCAST_CONNECTION" value="null" force="true"/>
diff --git a/tests/Feature/Provisioning/HostStepsTest.php b/tests/Feature/Provisioning/HostStepsTest.php
index 7207806..19b04e3 100644
--- a/tests/Feature/Provisioning/HostStepsTest.php
+++ b/tests/Feature/Provisioning/HostStepsTest.php
@@ -1061,7 +1061,7 @@ it('gives the host a name that points at the tunnel, not at its public address',
     // The management address: publishing a Proxmox host's public IP would hand
     // every scanner a target. Written to the internal hostsdir, not upserted
     // anywhere via the (public) Hetzner client — see the mutation test below.
-    expect($s['hostDns']->fqdns['fsn-01'])->toBe('fsn-01.node.clupilot.com')
+    expect($s['hostDns']->fqdns['fsn-01'])->toBe('fsn-01.node.clupilot.cloud')
         ->and($s['hostDns']->ips['fsn-01'])->toBe('10.66.0.11')
         ->and($s['hostDns']->ips['fsn-01'])->not->toBe('203.0.113.11');
 });