diff --git a/hosts/goyplex-vm/custom.nix b/hosts/goyplex-vm/custom.nix
new file mode 100644
index 0000000..3f5bb75
--- /dev/null
+++ b/hosts/goyplex-vm/custom.nix
@@ -0,0 +1,23 @@
+# per-host overrides: static IP for the k3s edge node
+# LAN: 10.0.1.0/24, gw 10.0.1.1, DNS pas 10.0.1.45 + 1.1.1.1
+{ ... }:
+
+{
+  networking.networkmanager.ensureProfiles.environmentFiles = [ ];
+  networking.networkmanager.ensureProfiles.profiles = {
+    "ens18-static" = {
+      connection = {
+        id = "ens18-static";
+        type = "ethernet";
+        interface-name = "ens18";
+      };
+      ipv4 = {
+        method = "manual";
+        addresses = "10.0.1.47/24";
+        gateway = "10.0.1.1";
+        dns = "10.0.1.45;1.1.1.1;";
+      };
+      ipv6.method = "disabled";
+    };
+  };
+}
diff --git a/hosts/hermes-vm/custom.nix b/hosts/hermes-vm/custom.nix
new file mode 100644
index 0000000..51ef027
--- /dev/null
+++ b/hosts/hermes-vm/custom.nix
@@ -0,0 +1,23 @@
+# per-host overrides: static IP for the hermes agent host
+# LAN: 10.0.1.0/24, gw 10.0.1.1, DNS pas 10.0.1.45 + 1.1.1.1
+{ ... }:
+
+{
+  networking.networkmanager.ensureProfiles.environmentFiles = [ ];
+  networking.networkmanager.ensureProfiles.profiles = {
+    "ens18-static" = {
+      connection = {
+        id = "ens18-static";
+        type = "ethernet";
+        interface-name = "ens18";
+      };
+      ipv4 = {
+        method = "manual";
+        addresses = "10.0.1.140/24";
+        gateway = "10.0.1.1";
+        dns = "10.0.1.45;1.1.1.1;";
+      };
+      ipv6.method = "disabled";
+    };
+  };
+}