diff --git a/etc/systemd/network/1.ns1.grapheneos.org.link b/etc/systemd/network/1.ns1.grapheneos.org.link
new file mode 100644
index 0000000..ccb8332
--- /dev/null
+++ b/etc/systemd/network/1.ns1.grapheneos.org.link
@@ -0,0 +1,5 @@
+[Match]
+MACAddress=fa:16:3e:13:ae:28
+
+[Link]
+Name=public
diff --git a/etc/systemd/network/1.ns1.grapheneos.org.network b/etc/systemd/network/1.ns1.grapheneos.org.network
new file mode 100644
index 0000000..2ee76c8
--- /dev/null
+++ b/etc/systemd/network/1.ns1.grapheneos.org.network
@@ -0,0 +1,23 @@
+[Match]
+Name=public
+
+[Network]
+DHCP=ipv4
+LinkLocalAddressing=no
+Address=2604:2dc0:202:300::23a6/128
+
+[Route]
+Destination=::/0
+Gateway=2604:2dc0:202:300::1
+PreferredSource=2604:2dc0:202:300::23a6
+
+[Route]
+Destination=2604:2dc0:202:300::1
+PreferredSource=2604:2dc0:202:300::23a6
+
+[DHCP]
+UseMTU=true
+
+[CAKE]
+Bandwidth=500M
+PriorityQueueingPreset=besteffort
diff --git a/hosts.sh b/hosts.sh
index c409627..41ec714 100644
--- a/hosts.sh
+++ b/hosts.sh
@@ -1,6 +1,7 @@
 declare -Ar hosts_hostname=(
     [ns1.staging.grapheneos.org]=ns1-staging
     [0.ns1.grapheneos.org]=0-ns1
+    [1.ns1.grapheneos.org]=1-ns1
     [2.ns1.grapheneos.org]=2-ns1
     [3.ns1.grapheneos.org]=3-ns1
     [0.ns2.grapheneos.org]=0-ns2
@@ -45,6 +46,7 @@ declare -Ar hosts_hardware_watchdog=(
 )
 
 declare -Ar hosts_authorized_keys=(
+    [1.ns1.grapheneos.org]=authorized_keys-replica-ns1
     [2.ns1.grapheneos.org]=authorized_keys-replica-ns1
     [3.ns1.grapheneos.org]=authorized_keys-replica-ns1
     [1.ns2.grapheneos.org]=authorized_keys-replica-ns2
@@ -63,6 +65,7 @@ declare -Ar hosts_authorized_keys=(
 declare -Ar hosts_firewall=(
     [ns1.staging.grapheneos.org]=ns1
     [0.ns1.grapheneos.org]=ns1
+    [1.ns1.grapheneos.org]=ns1
     [2.ns1.grapheneos.org]=ns1
     [3.ns1.grapheneos.org]=ns1
     [0.ns2.grapheneos.org]=ns2
@@ -116,6 +119,7 @@ declare -Ar hosts_tcp_wmem_max=(
 declare -Ar hosts_conntrack_size=(
     [ns1.staging.grapheneos.org]=65536
     [0.ns1.grapheneos.org]=131072
+    [1.ns1.grapheneos.org]=131072
     [2.ns1.grapheneos.org]=131072
     [3.ns1.grapheneos.org]=131072
     [0.ns2.grapheneos.org]=65536
@@ -180,6 +184,7 @@ declare -Ar hosts_journald_system_max_file_size=(
 declare -Ar hosts_journald_max_retention_sec=(
     [ns1.staging.grapheneos.org]=4day
     [0.ns1.grapheneos.org]=4day
+    [1.ns1.grapheneos.org]=4day
     [2.ns1.grapheneos.org]=4day
     [3.ns1.grapheneos.org]=4day
     [0.ns2.grapheneos.org]=4day
@@ -194,6 +199,7 @@ declare -Ar hosts_journald_max_retention_sec=(
 declare -Ar hosts_ipv4_address=(
     [ns1.staging.grapheneos.org]=198.98.56.238
     [0.ns1.grapheneos.org]=51.161.34.158
+    [1.ns1.grapheneos.org]=15.204.8.153
     [2.ns1.grapheneos.org]=57.129.65.223
     [3.ns1.grapheneos.org]=15.235.197.61
     [0.ns2.grapheneos.org]=198.98.53.141
@@ -222,6 +228,7 @@ declare -Ar hosts_ipv4_address=(
 declare -Ar hosts_ipv6_address=(
     [ns1.staging.grapheneos.org]=2605:6400:10:c41:de92:c534:326a:711a
     [0.ns1.grapheneos.org]=2607:5300:205:200::eaa
+    [1.ns1.grapheneos.org]=2604:2dc0:202:300::23a6
     [2.ns1.grapheneos.org]=2001:41d0:701:1100::245b
     [3.ns1.grapheneos.org]=2402:1f00:8000:800::3966
     [0.ns2.grapheneos.org]=2605:6400:10:102e:95bc:89ef:2e7f:49bb
@@ -249,7 +256,7 @@ declare -Ar hosts_ipv6_address=(
 
 readonly hosts_dns=(
     ns1.staging.grapheneos.org
-    {0,2,3}.ns1.grapheneos.org
+    {0..3}.ns1.grapheneos.org
     {0..2}.ns2.grapheneos.org
 )
 
@@ -332,7 +339,7 @@ readonly hosts_buyvm=(
 )
 
 readonly hosts_ovh=(
-    {0,2,3}.ns1.grapheneos.org
+    {0..3}.ns1.grapheneos.org
     mail.grapheneos.org
     {0,2,3}.grapheneos.org
     {0,2,3}.grapheneos.network
diff --git a/packages/1.ns1.grapheneos.org b/packages/1.ns1.grapheneos.org
new file mode 100644
index 0000000..c9199b2
--- /dev/null
+++ b/packages/1.ns1.grapheneos.org
@@ -0,0 +1,40 @@
+base
+bird
+chrony
+cloud-guest-utils
+conntrack-tools
+fish
+geoip
+geoipupdate
+grub
+htop
+ioping
+iperf
+libmaxminddb
+linux-lts
+logrotate
+man-db
+mmdblookup
+moreutils
+mtr
+neovim
+nftables
+nginx
+nginx-mod-stream
+nmap
+openssh
+pacman-contrib
+pacutils
+plocate
+powerdns
+pv
+rsync
+strace
+stress
+sysstat
+tinyxxd
+tree
+unbound
+xfsprogs
+yaml-cpp
+zerotier-one