turns out we've moved the geodns apt list to a template and never noticed