diff --git a/clusters/cl01tl/services/blocky/values.yaml b/clusters/cl01tl/services/blocky/values.yaml
index 7f0a99f2d..061ae04dc 100644
--- a/clusters/cl01tl/services/blocky/values.yaml
+++ b/clusters/cl01tl/services/blocky/values.yaml
@@ -130,29 +130,29 @@ blocky:
             allowlists:
               sus:
                 - |
-                  alexlebens.net
-                  alexlebens.dev
-                  boreal-beaufort.ts.net
+                  *.alexlebens.net
+                  *.alexlebens.dev
+                  *.boreal-beaufort.ts.net
               ads:
                 - |
-                  alexlebens.net
-                  alexlebens.dev
-                  boreal-beaufort.ts.net
+                  *.alexlebens.net
+                  *.alexlebens.dev
+                  *.boreal-beaufort.ts.net
               priv:
                 - |
-                  alexlebens.net
-                  alexlebens.dev
-                  boreal-beaufort.ts.net
+                  *.alexlebens.net
+                  *.alexlebens.dev
+                  *.boreal-beaufort.ts.net
               mal:
                 - |
-                  alexlebens.net
-                  alexlebens.dev
-                  boreal-beaufort.ts.net
+                  *.alexlebens.net
+                  *.alexlebens.dev
+                  *.boreal-beaufort.ts.net
               pro:
                 - |
-                  alexlebens.net
-                  alexlebens.dev
-                  boreal-beaufort.ts.net
+                  *.alexlebens.net
+                  *.alexlebens.dev
+                  *.boreal-beaufort.ts.net
             clientGroupsBlock:
               default:
                 - sus
diff --git a/hosts/ps08rp/blocky/config.yml b/hosts/ps08rp/blocky/config.yml
index 05279e1f2..76cbe5faa 100644
--- a/hosts/ps08rp/blocky/config.yml
+++ b/hosts/ps08rp/blocky/config.yml
@@ -103,29 +103,29 @@ blocking:
   allowlists:
     sus:
       - |
-        alexlebens.net
-        alexlebens.dev
-        boreal-beaufort.ts.net
+        *.alexlebens.net
+        *.alexlebens.dev
+        *.boreal-beaufort.ts.net
     ads:
       - |
-        alexlebens.net
-        alexlebens.dev
-        boreal-beaufort.ts.net
+        *.alexlebens.net
+        *.alexlebens.dev
+        *.boreal-beaufort.ts.net
     priv:
       - |
-        alexlebens.net
-        alexlebens.dev
-        boreal-beaufort.ts.net
+        *.alexlebens.net
+        *.alexlebens.dev
+        *.boreal-beaufort.ts.net
     mal:
       - |
-        alexlebens.net
-        alexlebens.dev
-        boreal-beaufort.ts.net
+        *.alexlebens.net
+        *.alexlebens.dev
+        *.boreal-beaufort.ts.net
     pro:
       - |
-        alexlebens.net
-        alexlebens.dev
-        boreal-beaufort.ts.net
+        *.alexlebens.net
+        *.alexlebens.dev
+        *.boreal-beaufort.ts.net
   clientGroupsBlock:
     default:
       - sus
diff --git a/hosts/ps09rp/blocky/config.yml b/hosts/ps09rp/blocky/config.yml
index 05279e1f2..76cbe5faa 100644
--- a/hosts/ps09rp/blocky/config.yml
+++ b/hosts/ps09rp/blocky/config.yml
@@ -103,29 +103,29 @@ blocking:
   allowlists:
     sus:
       - |
-        alexlebens.net
-        alexlebens.dev
-        boreal-beaufort.ts.net
+        *.alexlebens.net
+        *.alexlebens.dev
+        *.boreal-beaufort.ts.net
     ads:
       - |
-        alexlebens.net
-        alexlebens.dev
-        boreal-beaufort.ts.net
+        *.alexlebens.net
+        *.alexlebens.dev
+        *.boreal-beaufort.ts.net
     priv:
       - |
-        alexlebens.net
-        alexlebens.dev
-        boreal-beaufort.ts.net
+        *.alexlebens.net
+        *.alexlebens.dev
+        *.boreal-beaufort.ts.net
     mal:
       - |
-        alexlebens.net
-        alexlebens.dev
-        boreal-beaufort.ts.net
+        *.alexlebens.net
+        *.alexlebens.dev
+        *.boreal-beaufort.ts.net
     pro:
       - |
-        alexlebens.net
-        alexlebens.dev
-        boreal-beaufort.ts.net
+        *.alexlebens.net
+        *.alexlebens.dev
+        *.boreal-beaufort.ts.net
   clientGroupsBlock:
     default:
       - sus