diff --git a/machines/control/configuration.nix b/machines/control/configuration.nix
index 090666a..b0d234b 100644
--- a/machines/control/configuration.nix
+++ b/machines/control/configuration.nix
@@ -3,5 +3,6 @@
 
   ];
 
-  # New machine!
+  time.timeZone = "Etc/GMT-3"; # UTC+3 (fixed offset, no DST)
+  services.timesyncd.enable = true;
 }
diff --git a/machines/ns1/configuration.nix b/machines/ns1/configuration.nix
index 4595f44..07441c8 100644
--- a/machines/ns1/configuration.nix
+++ b/machines/ns1/configuration.nix
@@ -7,6 +7,9 @@ in
     ../../modules/dns/authoritative.nix
   ];
 
+  time.timeZone = "Etc/GMT-1"; # UTC+1 (fixed offset, no DST)
+  services.timesyncd.enable = true;
+
   # ns1 = primary (master): holds each master zone file, notifies ns2 and
   # allows it to pull the zone via AXFR/IXFR.
   services.knot.settings.zone = map (d: {
diff --git a/machines/ns2/configuration.nix b/machines/ns2/configuration.nix
index f9465f4..0ff71fd 100644
--- a/machines/ns2/configuration.nix
+++ b/machines/ns2/configuration.nix
@@ -7,6 +7,9 @@ in
     ../../modules/dns/authoritative.nix
   ];
 
+  time.timeZone = "Etc/GMT-3"; # UTC+3 (fixed offset, no DST)
+  services.timesyncd.enable = true;
+
   # ns2 = secondary (slave): pulls every zone from ns1 and accepts its NOTIFY.
   services.knot.settings.zone = map (d: {
     domain = d;